Practical review Not a complicated audit This is a practical review focused on common security gaps that small businesses can actually understand and fix.
PasswordsPasswords are shared informallyShared accounts, weak password habits, spreadsheets, sticky notes, and unclear password ownership can create avoidable risk.
MFAMulti-Factor Authentication is inconsistentSome users may be protected while others are not, and administrator accounts may not have the right safeguards.
AccessFormer employees may still have accessOld accounts, shared files, mailboxes, mobile devices, and software logins should be reviewed after staff changes.
Admin accessAdministrator rolesGlobal admin accountsBackup adminsRole assignmentsPrivileged access habitsAdmin documentation
ProtectionPasswords and MFAPassword policyPassword manager usageMulti-Factor AuthenticationShared password cleanupAccount recovery settings
FilesShared files and drivesReview shared drives, external sharing, file ownership, former employee files, and sensitive data locations.
DevicesDevice and account connectionReview whether company devices, personal devices, and account access are documented clearly enough.
ProcessOnboarding and offboarding risksReview whether employee changes trigger the right account setup, access removal, license cleanup, and file transfer steps.
FindingsPlain-language findingsA clear summary of what was reviewed, what looks good, and what needs attention.
PrioritiesPractical next stepsA prioritized list of recommended cleanup actions, starting with the most important issues.
SupportCleanup optionsOptional help implementing the recommended changes, documentation, and review process.
Small Business Password Policy TemplateSet clear password expectations for employees, shared accounts, and business systems.Open template
Microsoft 365 Admin Access Review TemplateReview who has Microsoft 365 administrator access and what needs cleanup.Open template
Employee IT Offboarding ChecklistRemove access, recover devices, transfer files, and clean up licenses after an employee leaves.Open checklist
Is this a formal cybersecurity audit?No. This is a practical small business security review focused on common gaps and next steps.
Can you review Microsoft 365 and Google Workspace?Yes. The review can focus on Microsoft 365, Google Workspace, or the systems most important to your business.
Can you help fix what you find?Yes. J3 Systems Group can help with cleanup, documentation, and recurring review steps after the findings are clear.
Do you explain findings in plain language?Yes. The goal is to make the findings understandable and useful for business owners and office managers.
