Support response
Tina's meeting starts in 20 minutes
Excel has crashed. It only affects one user, so the ticket is classed as minor, with eight hours allowed for a response. To IT, it's a minor problem. To the business, it's a customer meeting falling apart.
Does your IT provider understand why the problem matters, or only what priority the ticket has?
Business continuity
Your main server won't switch back on
A four-hour agreement usually means an engineer turns up within four hours, not that the server is fixed. Meanwhile, orders still need to leave the building and wages are still being paid.
Could your IT team prove how the business would keep working while the server was repaired?
Read: Why backups don't keep your business running →
Security monitoring
Who's watching at 11pm?
An attacker might quietly disable the antivirus, create a new user and install remote-access software. Individually, none of it looks like a virus. Together, it should make somebody stop and investigate.
If it happened tonight, who would notice, and who would act?
Read: Is a lack of monitoring going to cause your next breach? →
Encryption
A laptop is stolen tomorrow
A Windows password and full-drive encryption are not the same thing. Without encryption, someone can remove the drive and read the files. The ICO recommends encrypting laptops that hold personal information.
Could you prove the drive was encrypted before it disappeared?
Read: Encryption might save your business £1000s →