ComputerWerx - Blog by John

Microsoft 365 Isn’t Fully Backed Up – Here’s What SMBs Miss

Sun, 10 May 2026 14:56:17 +0000

A lot of businesses assume that because they’re using Microsoft 365, their data is automatically backed up.

It makes sense—Microsoft runs the platform, so surely everything is protected, right?

Not quite.

At ComputerWerx, this is one of the most common gaps we see across SMBs in Sydney. Businesses are relying on Microsoft 365 every day for email, files, and collaboration—but don’t have a true backup in place.

What Microsoft does (and doesn’t do)

Microsoft 365 is highly reliable. It protects its infrastructure and ensures the service is available.

But when it comes to your data—emails, SharePoint files, OneDrive, Teams content—the responsibility is shared.

Microsoft doesn’t provide full, long-term backups in the way most businesses expect.

What can actually go wrong?

More than you might think:

Accidental deletion

Files, emails, or folders get deleted—and retention periods pass before anyone notices.

Malicious activity

A compromised account can delete or encrypt data quickly.

Ransomware

Files synced to the cloud can be encrypted and overwritten.

Internal changes

Staff leaving, overwriting files, or removing access without proper controls.

Limited recovery options

Once retention windows expire, data can be gone for good.

Why this matters for SMBs

Most SMBs don’t have the time or visibility to track all of this.

So when something goes missing, the assumption is:

“We’ll just restore it from Microsoft”

But in many cases, that option is limited—or no longer available.

That’s where the risk sits.

What ComputerWerx recommends

At ComputerWerx, we treat Microsoft 365 like any critical business system—it needs a dedicated backup solution.

That means:

Independent backups

Your data is backed up separately from Microsoft, so it’s protected no matter what happens.

Long-term retention

Keep data for as long as your business needs—not just default timeframes.

Granular recovery

Restore a single email, file, or full mailbox quickly.

Protection across all services

Exchange, OneDrive, SharePoint, and Teams—all covered.

A quick example

We worked with a business that lost a large set of files after a staff member deleted a synced folder.

By the time they realised, it was outside Microsoft’s recovery window.

Unfortunately, without a proper backup, the data couldn’t be restored.

After implementing a ComputerWerx backup solution, they now have full visibility and the ability to recover anything—quickly.

Final thought

Microsoft 365 is a powerful platform—but it’s not a complete backup solution.

At ComputerWerx, we help SMBs make sure their data is actually protected, not just assumed to be.

Because when it comes to your business data, “we thought it was backed up” isn’t something you want to rely on.

Office Printers Without the Stress: A Smarter Approach for SMBs

Sun, 10 May 2026 14:23:14 +0000

Printers shouldn’t be something you have to think about.

But for most SMBs, they’re a constant headache—running out of toner at the worst time, random breakdowns, multiple different models, and no real idea what it’s all costing.

At ComputerWerx, we see this every week across offices in Sydney. And the reality is, most businesses aren’t doing anything wrong—it’s just that their print setup hasn’t kept up.

That’s where a Managed Print Service (MPS) comes in.

What does “stress-free printing” actually look like?

It means your printers just work.

No last-minute toner runs. No unexpected repair bills. No scrambling when something breaks. Everything is managed, monitored, and supported properly.

The real benefits for your business

Predictable costs (no surprises)

You move to a simple cost-per-page model, so you know exactly what you’re spending each month. No more inflated toner pricing or emergency purchases.

Reduced risk with full warranty coverage

All devices are covered under a full service and warranty agreement. If something fails, it’s fixed or replaced—no large, unexpected costs hitting your budget.

Less downtime

With proactive monitoring, issues are picked up early and resolved before they impact your team.

Simpler setup

We standardise your environment so you’re not dealing with five different printers from five different vendors.

More productive team

Your staff aren’t wasting time trying to fix printers—they can just get on with their work.

Why ComputerWerx uses OKI printers

We typically deploy OKI multifunction printers because they’re reliable, cost-effective, and ideal for SMB environments.

Most businesses only need four core options:

A4 Black & White – everyday office printing

A4 Colour – client documents and presentations

A3 Black & White – higher volume and larger formats

A3 Colour – marketing material and detailed prints

This keeps things simple while covering everything your business needs—without overcomplicating it.

A quick example

We worked with a business that had a mix of old printers, constant toner issues, and regular breakdowns.

They didn’t realise how much time and money it was costing them.

ComputerWerx stepped in and:

Replaced the mix of devices with a standard OKI fleet

Implemented a Managed Print Service

Included full warranty and proactive support

The result? Fewer issues, lower costs, and no more stress around printing.

Final thought

Printers should be the easiest part of your IT—not the most frustrating.

With ComputerWerx Managed Print Services, you’re not just reducing costs—you’re removing the risk of unexpected spend and making printing one less thing to worry about.

If your current setup feels harder than it should be, it’s probably time for a simpler approach.

Is Your MFA Phishing-Proof? What SMBs Need to Know Now

Sun, 10 May 2026 13:57:09 +0000

For years, multi-factor authentication (MFA) has been one of the best ways to protect business accounts—and it still is.

But there’s a shift happening.

At ComputerWerx, we’re seeing more cases where attackers aren’t trying to break MFA—they’re working around it using smarter phishing techniques.

That’s where the idea of “phishing-resistant MFA” comes in.

What does “phishing-proof MFA” actually mean?

Not all MFA is created equal.

Traditional MFA methods—like push notifications or SMS codes—add a layer of protection, but they can still be tricked or abused.

Phishing-resistant MFA is designed so that:

Credentials can’t be replayed

Login sessions can’t be hijacked easily

Users can’t be tricked into approving access

In simple terms—it’s much harder for attackers to bypass, even with advanced phishing.

Where standard MFA falls short

Here’s what we’re seeing more often across SMBs:

MFA fatigue (prompt spamming)

Users get repeated login requests and eventually approve one—often without realising.

Adversary-in-the-Middle (AiTM)

Attackers intercept login sessions in real time, capturing tokens even after MFA is completed.

Fake app approvals (OAuth phishing)

Users grant access to what looks like a legitimate Microsoft app—no password required.

So what should SMBs be doing?

This doesn’t mean MFA is broken—it just means it needs to be set up properly and strengthened.

At ComputerWerx, here’s how we approach it:

Move to stronger MFA methods

Number matching, authenticator apps, or hardware-based authentication instead of basic push approvals.

Reduce reliance on SMS and simple prompts

These are the easiest for attackers to exploit.

Tighten conditional access policies

Limit logins based on location, device, and risk level.

Review app permissions regularly

OAuth access is one of the most overlooked risks.

Educate users (practically)

Staff should know:

Never approve unexpected prompts

What a suspicious login looks like

When to report something immediately

A quick example

We worked with a business that had MFA enabled across all users—but still had suspicious login activity.

The issue wasn’t the technology—it was how it was being used.

After tightening MFA methods, locking down access policies, and running short user awareness sessions, the problem stopped almost immediately.

Final thought

MFA is still essential—but it’s no longer the finish line.

The real question for SMBs now is:

“Is our MFA actually phishing-resistant?”

At ComputerWerx, we help businesses move from basic protection to practical, real-world security that stands up to today’s threats.

If you’re not sure where you sit, it’s worth taking a closer look.

Essential Eight for SMBs: Practical Cyber Security That Actually Works

Sun, 10 May 2026 13:40:42 +0000

If you run an SMB, cyber security can feel like something you’ll “get to later.” Most businesses we speak to aren’t ignoring it—they’re just busy, and nothing’s gone wrong yet.

But the reality is, most cyber attacks on SMBs don’t come from anything advanced. They come from simple gaps—unpatched systems, weak access controls, or no real backup plan.

That’s exactly what the Essential Eight is designed to fix.

At ComputerWerx, we see it as one of the most practical cyber security frameworks for small and medium businesses in Sydney and across Australia. It focuses on the basics that actually reduce risk—without overcomplicating things.

What is the Essential Eight?

The Essential Eight is a set of baseline cyber security controls recommended by the Australian Cyber Security Centre. It’s built to help businesses protect against common threats like ransomware, phishing attacks, and data breaches.

Why it matters for SMBs

Stops common attacks before they start

Simple controls like patching, application control, and multi-factor authentication (MFA) go a long way in preventing attacks.

Reduces downtime and business disruption

Strong backups and recovery processes mean you’re not stuck if something does happen.

Gives you visibility and control

You know who has access, what’s running, and where your risks are—something many SMBs lack.

Builds trust with customers

More clients now expect solid IT security and data protection practices, even from smaller businesses.

A real-world example

We worked with a Sydney-based SMB that had grown quickly but hadn’t tightened up its IT security. Shared admin accounts, inconsistent updates, and no confidence in backups.

No incident—but it was only a matter of time.

We implemented the Essential Eight in a practical way:

Removed shared logins and tightened admin access

Rolled out consistent patch management

Enabled MFA across email and key systems

Put proper backup and disaster recovery in place

The outcome? Less risk, better system performance, and peace of mind knowing the business could recover if needed.

How ComputerWerx helps SMBs

At ComputerWerx, we specialise in cyber security for SMBs in Sydney and the Inner West. We don’t overengineer solutions—we focus on what actually works for your business.

If you’re unsure where you stand with the Essential Eight, we can assess your current environment and map out a clear, staged approach to improve it.

Because good cyber security isn’t about ticking boxes—it’s about keeping your business running.