Arch Technologies

If you've ever had to unwind a former employee's access and ended up chasing logins for a week, that mess almost always started during the new hire's onboarding.

A clean offboarding takes about 90 minutes of IT time when the onboarding was done properly.

We wrote up the four onboarding shortcuts that you should avoid because they almost always guarantee a messy exit… plus how to retrofit hygiene on the team you already have.

Read it here: https://archtechllc.com/news/why-bad-onboarding-is-the-real-cause-of-messy-offboarding/

And if you want help building a proper onboarding process, we are happy to help.

Why Bad Onboarding Is the Real Cause of Messy Offboarding | Arch Technologies By the time an employee hands in their notice, the decisions that will make their departure clean or messy have already been made. They were made in the first weeks of the person’s tenure, when nobody was paying close attention because the new hire had just arrived and there were a hundred other t...

When the same person designs your IT systems and protects them, you've got a built-in conflict of interest.

Even a great IT person can't reliably check their own work. Backups, firewall rules, access reviews, incident post-mortems: every one of those checks is done by the same person who built the thing being checked. The result is a system where every safeguard verifies itself.

Large enterprises split these roles for exactly this reason. They have separate teams for engineering and security, and the security team's job is to find what the engineering team missed. Small businesses can't afford a full second team, but the principle still applies.

The fix is lighter than you'd expect. Hire an outside firm for one half-day a year to audit what your internal IT person built. The audit looks at your backup logs, your access list, your patch report, and the last three things your IT person would like to fix. The cost is usually under $3,000, and the value comes from the fact that the outside auditor doesn't work for the IT person.

One half-day audit a year is the whole fix. It costs less than ignoring the problem ever could.

A ransomware group called "The Gentlemen" is one of the fastest-growing names in cybercrime right now. You probably haven't heard of them.

In April 2026, The Gentlemen accounted for roughly 10% of all logged ransomware attacks worldwide and climbed into the top three most active ransomware operations, alongside Qilin and DragonForce. One of their named victims that month was Adaptavist, an Atlassian platinum partner that serves thousands of business customers.

This shift matters because the names you might already know are out of the picture. LockBit, Conti, REvil, and Hive are all gone or rebranded after law enforcement crackdowns and infighting. The replacements use different aliases but the same tactics: phishing, credential theft, vulnerable VPN appliances, and unpatched servers. They encrypt your data and steal a copy to threaten you twice.

The good news is that the defense looks the same regardless of which group is hitting your industry. Five things work against all of them: patching CISA KEV systems within two weeks, MFA with number matching on internet-facing systems, immutable offsite backups that you actually test, security tools that watch for behavior instead of relying on known viruses, and phishing training that covers 2026 forms like QR codes, voice cloning, and fake CAPTCHA pages.

You can't keep up with which ransomware group is hot this month, and you don't have to. The defenses that work today will still work when The Gentlemen rebrand into something else next year.

Cyber Threats Spike in April 2026 as Ransomware Expands and Attack Volumes Climb After Short-Lived Moderation - Check Point Blog April 2026 Cyber Attack Trends: Ransomware & GenAI Risks Surge Every Region Recorded Higher Attack Volumes in April In April 2026, global cyber-attack activity rebounded sharply following the brief moderation observed Global cyberattacks rose 10% in April 2026 as ransomware expanded and GenAI risks persisted. See key trends across sectors, regions, and industri...