Who this is for: owners and managers of growing businesses who want their IT to be reliable and predictable as the team gets bigger.

Most IT problems in small and medium businesses are not caused by bad luck. They come from missing basics. These ten habits prevent most of them.

1. Know what you own

Keep a simple register of every computer, server, router, printer and software licence: who uses it, when it was bought and when the warranty ends. You cannot protect or plan for what you cannot list.

2. Back up and test

Automatic daily backups with at least one copy off site, and a restore test every quarter. Backups should cover cloud services as well as local machines.

3. Patch on a schedule

Automatic updates for workstations, a monthly review for servers and network equipment, and a rule that anything no longer supported by its manufacturer gets replaced.

4. Use multi-factor authentication

Everywhere it is offered, starting with email, remote access and administrator accounts.

5. Manage joiners and leavers

A checklist for new starters (accounts, equipment, training) and for leavers (accounts disabled, equipment returned, data handed over) removes a surprising amount of risk and confusion.

6. Give people the right access

Staff need access to what their job requires and nothing more. Review it once a year.

7. Plan replacement, not emergencies

Business computers typically serve well for around three to five years. Replacing a fifth of the fleet each year is easier to budget than replacing everything after a failure, and it keeps your team productive.

8. Protect power and connectivity

A UPS or inverter on the router, switches and key equipment, and a second internet line for anything that depends on the cloud. It is the cheapest way to protect productivity during load shedding.

9. Keep the documentation

Passwords in a company password manager, network diagram, supplier contacts and warranty details. Your business should never depend on one person’s memory.

10. Have one accountable IT partner

When hardware, network, software and support come from different suppliers, problems bounce between them. A single partner that knows your whole environment resolves issues faster and plans further ahead.

Where StepEdge fits

StepEdge supplies IT equipment, provides managed IT and helpdesk support, and builds custom software and websites for businesses across South Africa. If you would like a review of your current setup against this checklist, get in touch.

Who this is for: businesses adding IP cameras, access control, point-of-sale equipment or sensors to their network.

The Internet of Things (IoT) simply means everyday equipment that connects to your network: IP cameras, door controllers, receipt printers, environmental sensors and smart displays. They are useful, and they are also small computers that are often forgotten once installed. Poorly set up devices are a common way into a business network.

Change every default password

Many devices ship with a well-known username and password. Attackers scan the internet for exactly those. Set a unique, strong password on every device during installation, and record it securely.

Keep devices on their own network

Cameras and sensors should not sit on the same network as your accounts computer and file server. Place them on a separate network segment (a VLAN) with only the access they need. If one device is compromised, the rest of the business stays out of reach. This is straightforward with business-grade switches and routers.

Do not expose devices directly to the internet

Avoid opening ports on your router so that you can view cameras remotely. Use a secure remote-access method, such as a VPN or the manufacturer’s managed cloud service with multi-factor authentication switched on.

Update the firmware

Manufacturers release fixes for security flaws. Choose reputable brands that keep publishing updates, and schedule a regular check. Replace devices that are no longer supported.

Plan cabling and power

Wired cameras powered over Ethernet (PoE) are more reliable than Wi-Fi cameras, and a UPS on the recorder, switch and router keeps your footage and your alarms working through load shedding. Good cabling is a one-off cost that pays for itself in fewer callouts.

Think about the recorded data

Camera footage of staff and customers is personal information under POPIA. Keep recordings only as long as you need them, restrict who can view them, and display clear signage.

One team for the whole system

Retail and hospitality businesses often coordinate separate suppliers for tills, cameras and the network that connects them. StepEdge supplies, installs and supports POS and CCTV systems together with the network they run on, so responsibility sits in one place. Ask for a quote for your premises.

Who this is for: business owners who want to know which technology changes deserve budget this year, without the hype.

New technology is announced every week. Very little of it needs your attention. These are the developments we see making a practical difference for South African businesses right now.

Windows 10 is no longer supported

Microsoft ended support for Windows 10 in October 2025, which means no more security updates for machines still running it. Computers that meet the requirements can be upgraded to Windows 11. Older machines should be replaced on a planned schedule rather than in a crisis. Take stock of what you have, and prioritise anything that handles customer or financial data.

Wi-Fi 7 and better wireless

Wi-Fi 7 routers and access points are now widely available. If your office is crowded with devices, video calls and cloud applications, a modern router or access point makes a noticeable difference. If your current setup works, there is no urgency: upgrade when you replace equipment. We stock a wide range of networking equipment.

AI assistants, with a policy

AI assistants built into tools such as Microsoft 365 and Google Workspace can draft emails, summarise meetings and speed up routine work. The real question is what staff are allowed to paste into them. Decide which information may never be entered into a public AI tool, such as customer personal information and confidential contracts, and put it in writing before adoption spreads on its own.

Passkeys and stronger sign-in

Passkeys replace passwords with a secure device-based sign-in that cannot be phished. Support is growing across major services. Enable them where offered, and keep multi-factor authentication on everything else.

Resilient connectivity and power

For most South African businesses, the technology that matters most is not new at all: a second internet line, LTE failover and a UPS or inverter on the network equipment. With so much of the business now in the cloud, staying connected through outages is what keeps people working.

What to ignore for now

Skip anything you cannot connect to a business problem. If a product needs a long explanation of why you need it, it probably does not yet. Wait until a technology is proven, supported locally and clearly cheaper or better than what you have.

Need a second opinion?

If you are planning a refresh, we are happy to review your setup and tell you honestly what is worth changing. Contact StepEdge or browse our services.

Who this is for: business owners and managers deciding whether, and how much, of their IT to move to the cloud.

Moving to the cloud means running your email, files or applications on infrastructure that a provider looks after, instead of on a server in your office. Done well, it removes hardware you have to maintain and lets your team work securely from anywhere. Done badly, it produces a monthly bill and a connectivity problem. The difference is in the planning.

Start with the easy wins

Email, calendars and shared files are the natural first move. Services such as Microsoft 365 and Google Workspace are mature, affordable per user, and replace an on-site mail server that is expensive to keep secure. Most businesses see the benefit within the first month.

Then look at your applications

Ask of each application: is there a good cloud version, does it need to be close to your equipment, and how much would it hurt if it were unavailable for an afternoon? Accounting and CRM systems usually move well. Software that talks to on-site machinery, tills or specialised hardware often stays local, or moves to a hybrid arrangement.

Plan for connectivity and load shedding

Cloud services are only as reliable as the connection and power that reach them. Before moving, check that you have enough fibre bandwidth, add an LTE or second-line failover, and put the router, switches and Wi-Fi on a UPS or inverter so that a power cut does not take your office offline. This is the step most often skipped, and the one that determines whether staff trust the change.

Think about where your data lives

POPIA places conditions on transferring personal information outside South Africa. Ask any provider where your data is stored, how it is protected and what happens to it if you leave. Prefer providers with South African or clearly documented regional hosting where personal information is involved.

Understand the real cost

Compare the full picture: per-user licences, storage and backup, connectivity, support and the hardware you no longer need to replace. Cloud rarely saves money on day one, but it converts unpredictable capital purchases into a predictable monthly cost, and it reduces the risk of a failed server stopping the business.

What about virtualisation?

If you keep servers on site, virtualisation lets several servers run on one physical machine, cutting hardware, power use and recovery time. Many businesses use it as a stepping stone: virtualise first, then move workloads to the cloud when they are ready.

A sensible order of work

Assess what you have, move email and files, fix connectivity and power, migrate applications one at a time, and only then decommission old hardware. StepEdge offers cloud, hosting and managed IT services and can plan and run the migration with you. Get in touch to talk through your situation.

Who this is for: owners and office managers who know cybercrime is a real risk but do not have a security team, and want to know where to start.

Most successful attacks on small businesses are not sophisticated. They rely on a stolen password, an unpatched machine, a convincing email or a backup that did not work. Fixing those four things removes most of the risk. Here are the seven controls we put in place first, in order of value.

1. Turn on multi-factor authentication

A password on its own is one leaked database away from being useless. Multi-factor authentication (MFA) adds a second proof, usually a code or approval on a phone. Switch it on for email, Microsoft 365 or Google Workspace, banking, remote access and every administrator account. It is the single most effective control on this list.

2. Keep everything patched

Attackers scan for known flaws in operating systems, browsers, routers and firewalls. Turn on automatic updates for workstations, and schedule a monthly check for servers, firewalls and network equipment. Replace anything that no longer receives security updates, including computers still running Windows 10, which reached end of support in October 2025.

3. Back up properly, and test the restore

Ransomware encrypts files and often the backups connected to them. Keep at least three copies of important data, on two different types of storage, with one copy offline or immutable and out of the office. Then test a restore every quarter. A backup you have never restored is only a hope.

4. Protect email, where most attacks begin

Use a business email service with spam and phishing filtering, and train staff to slow down on any message that creates urgency, asks for payment or changes banking details. A short call to confirm a changed bank account has saved many businesses from invoice fraud.

5. Limit administrator access

Staff should work in standard accounts. Keep administrator rights for the few people who need them and for the tasks that require them. When someone leaves, disable their accounts the same day.

6. Run business-grade endpoint protection

Modern endpoint protection monitors behaviour as well as known viruses, and can isolate an infected machine before it spreads. Free consumer antivirus rarely provides central reporting or response.

7. Write down what you will do when something goes wrong

A one-page plan is enough: who to call, how to disconnect an affected machine, where the backups are and who speaks to customers. Under the Protection of Personal Information Act (POPIA), if personal information may have been accessed without authorisation, you are required to notify the Information Regulator and the affected people. Knowing that in advance saves precious hours.

Where to start

If you are unsure where you stand, start with an assessment: what you have, what is exposed and which of the seven controls are missing. StepEdge provides managed IT and security support for businesses across South Africa, and we are happy to talk it through. Contact us for a conversation, with no obligation.

Who this is for: an office of five to fifty people that has outgrown the router the ISP supplied and wants Wi-Fi that works in every room, wired desks that do not drop, and a setup someone can support.

The three parts

A router (the ISP’s fibre box or a business router) connects you to the internet. A switch gives you wired ports, one per desk, printer and camera, and with PoE it powers access points and cameras over the same cable. Access points give Wi-Fi; one good ceiling access point covers roughly 100–150 m² of open office, so a typical small office needs two to four rather than one router in the corner.

What to buy

For most small offices the TP-Link Omada or ASUS business ranges are the right fit: managed from one app, expandable, and priced for SMEs. A managed PoE switch with 16–24 ports, two to four Wi-Fi 6 access points, and the ISP router set to hand off to them. Mercusys covers very small budgets; Hikvision’s switches suit sites that also run their cameras.

Cabling is the part people skip

Wi-Fi is for laptops and phones; desktops, printers, the till and every camera should be on a cable. Cat6 cabling to each desk, terminated in a small wall rack, is a one-time job that removes most “the network is slow” calls for a decade.

Security basics that cost nothing extra

Change the default admin passwords, put guest Wi-Fi on its own network so visitors never touch office machines, and keep the firmware updated. A managed setup makes all three a checkbox.

What to budget

A two-access-point, 16-port PoE setup for a small office lands around R8,000–R15,000 in equipment; cabling is quoted per point after a survey. StepEdge designs, cables and installs across Gauteng, and hands the office a network a non-technical manager can see from one app.

See networking, or call +27 11 023 8740.

Who this is for: a small office or shop that needs to keep working, or at least shut down safely, through load-shedding and power cuts.

First decide what you are protecting

There are two different jobs. A UPS gives a few minutes to an hour of clean power so PCs, the router and the point-of-sale do not crash: enough to keep working through a short cut or shut down properly. An inverter with batteries (and optionally solar) runs the office for hours. Many small offices need both: a UPS on each critical machine and an inverter for lights, the network and the fridge.

Sizing a UPS

Add up the wattage of what plugs into it. A desktop PC and monitor draw around 150–300 W, a laptop 60 W, a router 20 W, a till and printer perhaps 100 W. Choose a UPS whose rated wattage (not VA) is at least 30% above that total. A 1,000–1,500 VA unit (roughly 600–900 W) covers a typical two-PC desk with the router; a 2,000–3,000 VA unit covers a small server or a POS counter with printer. Run time on a standard UPS is short, ten to twenty minutes at full load, because it is built to bridge, not to run.

Line-interactive is enough for most offices

Line-interactive models from APC and Mecer handle brownouts and cuts for PCs and network gear. Online (double-conversion) units from Eaton and APC cost more and are worth it for servers, medical or lab equipment.

Keeping the network up is the highest-value use

If only one thing gets a UPS, make it the router, fibre box and switch: a small 600–1,000 VA UPS keeps the whole office online for an hour or more, so laptops on battery keep working.

Batteries are the consumable

UPS batteries last two to four years. Note the date you install a UPS and plan to replace the battery, or ask us to test it annually.

What to budget

A desk UPS for one PC from around R1,500; a 1,500 VA unit for a desk plus network around R3,500–R5,000; an inverter-and-battery setup for a small office from around R15,000 upward depending on run time. StepEdge installs inverter systems in Gauteng and can survey the office first.

See power and UPS, or call +27 11 023 8740.

Who this is for: an owner or office manager buying one laptop or twenty for staff who mostly work in email, browser, Office and Teams, sometimes on the road.

Start with the line, not the brand

Dell (Latitude, Vostro, Pro), HP (ProBook, EliteBook) and Lenovo (ThinkPad) each sell business lines separate from their consumer ranges. Business lines cost more for the same processor, and it is worth it: better keyboards, tougher hinges, longer parts availability, and warranties that include on-site repair instead of a courier round-trip. StepEdge supplies all three.

The specification that matters in 2026

A current-generation Intel Core Ultra 5/7 or AMD Ryzen 5/7 processor, 16 GB of RAM (8 GB is the false economy that makes a new laptop feel slow within a year), a 512 GB NVMe SSD, and a 14-inch screen for anyone who travels or a 15.6-inch for a desk-bound user. Windows 11 Pro, not Home, if the machine will join a company network.

What to budget

A typical business notebook sits in the mid-twenty-thousands. Under R15,000 buys a capable entry business machine (Vostro or ProBook class); above R35,000 is workstation territory for design or engineering work most offices do not need.

Warranty and support

Check whether the model’s warranty is carry-in or on-site, and how long. Adding a three-year on-site care pack at purchase is the cheapest protection available, and we register it against the machine for you.

What happens after delivery is the real difference

A laptop out of the box is not ready for a business: it needs Windows set up, the user account and email configured, the printers and network joined, security installed and the old laptop’s data moved. StepEdge does this on site in Gauteng, and for a fleet we supply one standard build, asset-tag each machine and dispose of the old ones with POPIA-compliant data wiping.

Shortlist by need

• Road warrior: Dell Latitude 14 or Lenovo ThinkPad T14, light with long battery life and a good keyboard.
• Desk-based staff: Dell Vostro 15 or HP ProBook 450, best value with a larger screen.
• Executives and client-facing: HP EliteBook or Lenovo ThinkPad X1, premium build.

Browse computers and laptops, or call +27 11 023 8740 for a quote on any of these by name.