Access cleanup
Review users, roles, shared accounts, offboarding habits, and permission sprawl.
Security cleanup
Small-business security usually starts with practical basics: MFA, passwords, backups, user access, email/domain hardening, data handling, and recovery planning.

Review users, roles, shared accounts, offboarding habits, and permission sprawl.
Put basic account protections in place where they matter most.
Clarify what is backed up, who owns it, and what recovery would look like.
Every custom app, AI workflow, and process change should consider accounts, access, data handling, backups, and recovery.
A focused audit can identify the basics to fix first without overwhelming your team.