The Quarterly IT Health Check for Northern Beaches Businesses

If you run a small or mid sized business on the Northern Beaches, your tech should be quiet, secure, and predictable. A short quarterly IT health check keeps it that way. It reduces downtime, lowers cyber risk, and gives you simple evidence for insurers and clients. Use the checklist below to run a practical review that fits into one morning and works for offices in Manly, Brookvale, Dee Why, Frenchs Forest, Belrose, Warriewood, and Mona Vale.

---

What to review every quarter

1) Identity and access

Lock down who can get in, and prove it.

• Enforce MFA for every user with number match
• Block legacy protocols such as basic and SMTP
• Review admin roles, keep a separate break glass account, and rotate its password
• Check sign in risk and impossible travel alerts
  Tip: Save a one page access review signed by a manager

2) Email and threat protection

Stop phishing and spoofing before people click.

• Confirm Defender for Office 365 policies and review last 30 days of detections
• Check SPF, DKIM, and DMARC status at your DNS or email gateway
• Run a short phishing simulation and log completion rates
  Deliverable: Export a threat report and a single screenshot of SPF, DKIM, DMARC

3) Backup and restore test

Backups only matter if you can restore quickly.

• Use a third party Microsoft 365 backup for Exchange, SharePoint, OneDrive, Teams
• Back up laptops and servers where needed
• Perform a timed restore test for one mailbox item and one SharePoint file

4) Devices and patching

Keep endpoints compliant so problems do not stack up.

• Check Intune compliance report for all devices
• Validate that Windows Autopatch or monthly update rings in place
• Check BitLocker encryption coverage and antivirus status
• Retire or replace devices that are out of support

5) Network and Wi Fi

Stability first, then performance.

• Update router and access point firmware
• Separate staff, guest, and IoT with VLANs
• Test coverage in meeting rooms and shop fronts
• Add 4G or 5G failover if NBN drops affect trade

6) Data and documents

Protect client data without slowing the team.

• Apply Sensitivity Labels to email, SharePoint, and Teams
• Use expiry links for external sharing, not attachments
• Turn on Microsoft 365 backup for collaboration data
• Review retention labels for finance and client records
  Check: No public sharing on sensitive libraries

7) People and process

Make the basics routine and provable.

• Six short policies kept current: Access Control, Acceptable Use, BYOD, Backup, Incident Response, Data Retention
• Staff acknowledgement list in a spreadsheet
• Quarterly phishing refresher and five minute toolbox talk
• A small risk register with owners and due dates

What good looks like

• 100 percent MFA coverage, no legacy protocols, no standing global admins
• Defender policies active, spoofing controlled by DMARC, phishing results improving
• A successful restore test completed this quarter, with timings recorded
• All active devices compliant in Intune and encrypted
• Staff, guest, and IoT on separate Wi Fi, with failover ready for outages
• Labels on client libraries, external sharing only by link with expiry
• Policies updated this quarter, staff acknowledgements saved, risk register reviewed

---

Local quick wins across the Northern Beaches

• If storms repeatedly knock out your connection around Brookvale or Warriewood, fit a 5G router for Internet failover and add a small UPS for your modem and switch
• For clinics and professional suites near Frenchs Forest Hospital, Dee Why and Mona Vale, move scanning to labelled SharePoint libraries and turn on secure release for printers
• For retail around Manly and Dee Why, place one access point per small tenancy, force POS onto its own VLAN, and set a bandwidth cap on guest Wi Fi

---

Free IT Check

If you would like a second set of eyes, book a free IT Health Check for Northern Beaches businesses. You will receive a short report, the evidence pack folder ready to go, and a 90 day action plan that focuses on the highest risk items first.