Blue Ridge Technology

When the same person designs your IT systems and protects them, you've got a built-in conflict of interest.

Even a great IT person can't reliably check their own work. Backups, firewall rules, access reviews, incident post-mortems: every one of those checks is done by the same person who built the thing being checked. The result is a system where every safeguard verifies itself.

Large enterprises split these roles for exactly this reason. They have separate teams for engineering and security, and the security team's job is to find what the engineering team missed. Small businesses can't afford a full second team, but the principle still applies.

The fix is lighter than you'd expect. Hire an outside firm for one half-day a year to audit what your internal IT person built. The audit looks at your backup logs, your access list, your patch report, and the last three things your IT person would like to fix. The cost is usually under $3,000, and the value comes from the fact that the outside auditor doesn't work for the IT person.

One half-day audit a year is the whole fix. It costs less than ignoring the problem ever could.

In May 2026, Google launched a one-click tool that imports your team's Microsoft 365 user accounts directly into Google Workspace.

The feature is built into the Workspace setup flow for very small and small businesses. It pulls user accounts from M365 in a single step, and a separate import handles the data behind those accounts (emails, calendars, contacts, and OneDrive files). What used to be a multi-day project with consultants now takes under an hour for a 25-person team.

The real story is the switching cost. For years, a small business that started on M365 was effectively locked in by the labor of moving off. That lock just got weaker, and it changes the conversation even if you have no plans to switch.

Your next Microsoft 365 renewal becomes a real negotiation. Price increases that used to feel unavoidable because the alternative was too much work now have a reasonable Plan B. Bring it up. The reps already know.

If you're paying for M365 features your team doesn't use (Premium licensing, Defender add-ons, Power Platform seats), the renewal is also the moment to right-size. You're probably paying for two or three tiers above what your team actually needs.

Whether you plan to switch or not, your negotiating position just improved. Use it.

Google Workspace Updates: Small businesses can now seamlessly import users from Microsoft to Google Workspace arrow_back Back May 13, 2026 Small businesses can now seamlessly import users from Microsoft to Google Workspace Admin console Google Workspace Rapid Release Scheduled Release We’re excited to announce the beta release of a new, simplified way for very small and small-sized businesses to import th...

Most of the tools your team uses to get work done are probably not on your IT list.

Some examples: personal Dropbox accounts for client files, ChatGPT with confidential information pasted in, a Trello board the marketing team set up a year ago, a Notion workspace someone in operations runs from their phone. The name for all of this is shadow IT, and every business has more of it than you'd guess.

The risk shows up in two places. First, data that should live inside your business sits inside accounts you don't control and can't delete. When an employee leaves, the data stays where they put it. Second, none of those tools are configured with your security in mind. MFA settings are weak or off, and there's no data loss prevention, retention policy, or audit log to check when something goes wrong.

You don't need a top-down crackdown to fix this. Ask four questions in your next team meeting:

1. What software or web tool are you using this week that wasn't installed by IT?
2. Which one would slow your work down the most if it disappeared tomorrow?
3. Is any client or company data sitting in it?
4. Would you be embarrassed if it leaked in a breach?

Run the conversation as a fact-finding exercise. The helpful tools get sanctioned, the risky ones get replaced.

If you don't know what's running in your business, you can't protect it.