AI is creeping into more parts of business than most people realise.

It writes emails, helps analyse data, and powers tools your team might be using every day.

And in many cases, it’s been adopted quickly.

Which is great… until you stop and think about what would happen if something went wrong.

A big issue, that needs to be stopped quickly.

Would you know how?

Many businesses wouldn’t know how quickly they could shut down an AI system in an emergency.

Very few could say with confidence they’d be able to stop it quickly if something went wrong.

And explaining what happened afterwards, clearly and calmly to leadership or regulators, would be even harder.

In many organisations, AI isn’t being tracked in the same way as other systems.

Teams experiment with tools. New features get switched on. Integrations get added. Before long, AI is influencing how decisions are made.

But no one has a complete picture of where it’s being used. That creates blind spots.

If you don’t know where AI is running, you can’t easily stop it.

If you can’t stop it, you can’t control risk.

There’s also a question of ownership.

If an AI tool makes a mistake, for example, sends the wrong information, produces inaccurate data, or causes a compliance issue, who is responsible?

In many businesses, that answer isn’t clear. And when responsibility is unclear, response times slow down.

The assumption is often that this sits with IT, but it’s broader than that.

AI touches operations, customer service, finance, marketing. It’s woven into the business. Which means managing it properly is about governance.

That simply means having clear rules, visibility, and accountability across the whole organisation.

There’s also a growing expectation from regulators that businesses can explain how AI is being used and what happens when it fails.

That includes being able to show who is accountable and how decisions are being made.

This isn’t to say your business should avoid AI. It’s too useful for that, and in many cases, it’s already embedded in the tools you rely on.

But you must be in control of it.

Do you know which tools in your business are using AI?

Do you know who is responsible for them?

Do you have a clear way to pause or disable them if needed?

Would you be able to explain their role if something went wrong?

The opportunity right now is to get ahead of it.

Treat AI not just as a helpful tool, but as something that needs the same level of oversight as any other critical system in your business.

If you’re not completely sure where your risks are today, that’s something we can help you map out and tighten up. Get in touch.

There’s a new type of scam doing the rounds… and this one’s a little more convincing than most.

It looks like a genuine alert from Microsoft Azure Monitor.


It comes from a real Microsoft domain, and it lands in your inbox without being flagged as suspicious.

That’s why it’s catching people out.

Azure Monitor is a tool businesses use to keep an eye on their systems.

It tracks performance, spots problems, and sends alerts when something needs attention.

If you’re running cloud services, especially in Microsoft Azure, these kinds of notifications are completely normal.

So when an email arrives saying there’s a billing issue, suspicious activity, or a problem with your account, it doesn’t immediately raise alarm bells.

That’s where the problem starts.

These scam emails are designed to look urgent.

They might mention unexpected charges, invoices you don’t recognise, or even say your account has been suspended.

Then they push you to act quickly, usually by calling a phone number to “resolve” the issue.

The email itself can be genuinely sent through Azure Monitor.

That means it isn’t spoofed in the usual way.

It’s not pretending to be Microsoft. It’s using Microsoft’s own system to deliver the message. And because of that, many email security tools let it through without question.

Azure Monitor allows users to create alerts based on certain triggers. For example, a new invoice being generated or activity on an account.

Whoever sets up the alert can also customise the message that gets sent out.

Attackers are taking advantage of this.

They create alerts with very basic triggers, write their own warning message (which looks like a billing issue), and then send it out to mailing lists they control.

The result is a convincing, legitimate-looking email. It’s simple and it works.

We’ve seen similar tactics before using other trusted platforms like PayPal and Google tools.

The pattern is the same: Take a service people already trust and use it as the delivery method for the scam.

If you receive one of these alerts, pause.

That’s the most important step.

If an email is pushing you to act urgently, especially to call a number or share information, take a moment to verify it properly.

Go directly to your Azure account through your browser (not via any links in the email) and check for alerts there.

If there’s a real issue, it will show up inside your account.

And if you’re not sure, ask your IT support provider to check before you do anything.

This is a good reminder of how phishing attacks are evolving. It’s no longer badly written emails with obvious spelling mistakes. Some of these messages are polished, well-timed, and delivered through trusted systems.

Awareness is more important than ever.

If you’re not completely confident your team would spot something like this, we can help. Get in touch.

There’s an interesting disconnect happening in the business world right now.

Most IT leaders say data security is their number one concern when upgrading or modernizing systems.

In fact, nearly seven in ten rank it at the top of the list.

Yet only around a third say they feel extremely confident they would pass their next regulatory audit.

That’s a big confidence gap.

As a business owner, you might not describe what you’re doing as modernizing hybrid infrastructure, but that’s effectively what’s happening in most companies.

Over the years, you’ve added cloud software. Maybe Microsoft 365, cloud accounting, CRM systems, file sharing platforms.

At the same time, you may still rely on older systems or servers that have been in place for a long time.

That mix is completely normal. But it’s also where things get complicated.

When data lives in multiple places, it becomes harder to answer simple but important questions.

• Who has access to what?
• How does information move between systems?
• Are old platforms still holding sensitive data?
• Are access permissions regularly reviewed?

None of this feels dramatic day to day. Everything works. The team logs in. Emails get sent. Files get shared. But under the surface, complexity builds up.

The research also highlighted another pressure point: Many organizations still rely on legacy systems for critical operations, and more than half are struggling to find people with the right skills to manage today’s technology properly.

That combination makes it harder to feel fully in control.

Then there’s AI.

Lots of businesses are exploring AI tools to improve efficiency, detect fraud, or streamline processes. That can be a positive step.

But AI depends on clean, well-managed, accessible data. If your data security foundations aren’t strong, adding AI can amplify the problem.

From where I sit, the key issue isn’t whether security is important. Everyone agrees it is.

The real question is whether your current setup has kept pace with how your business has evolved.

Could you clearly explain where your sensitive data is stored?

Are you confident that access rights reflect how your team works today, not how it worked three years ago?

Would an external audit feel manageable rather than stressful?

These are business risk questions.

Good security is about understanding your own environment well enough to trust it.

And if you’re not completely sure how solid the foundations are, that’s usually a sign it needs some attention.

My team and I can help you with that. Get in touch.

If you use Windows every day for work, I’ve got a question for you.

What’s the one app you couldn’t live without?

Microsoft’s latest marketing says the answer should be Microsoft Copilot.

They’re calling it the number one productivity app in Windows 11, ahead of tools like File Explorer, Microsoft To Do and even the trusty Snipping Tool.

That’s quite a statement.

Now, I do understand why they’re saying it.

There’s a big push around AI PCs at the moment, and Copilot is front and centre of that story.

It sits on your desktop and promises to help you think, plan and get things done. You can ask it to summarise long emails, turn messy notes into a checklist, draft messages, or help you organise ideas for a project.

And yes, that can be genuinely helpful.

If you’ve ever opened your inbox to find a long, winding email thread, being able to pull out the key points quickly is a relief.

If you’ve scribbled half-formed ideas into a document, having something help you structure them can save time.

But here’s where I struggle with the “number one” label.

When I look at how most businesses work, the heavy lifting is done by other tools.

File Explorer is used constantly. It’s how you find client documents, move files, organise folders and keep everything in order. You don’t think about it much, but you rely on it all day.

The same goes for task apps like Microsoft To Do, or simple tools that let you grab screenshots and share information quickly.

They’re not flashy. They don’t get keynote speeches. But they’re woven into the fabric of your working day.

Copilot feels different. It’s more like an assistant sitting alongside those tools. It helps you process information and draft content, but it doesn’t replace the core systems underneath.

I suspect this ranking says more about Microsoft’s strategy than about real-world usage. They want AI to be seen as the future of productivity, so it makes sense to position Copilot at the top of the list.

From a business owner’s perspective, though, the more useful question isn’t “What does Microsoft say is number one?” It’s “Where do we waste time?”

If your team spends hours writing, summarising or planning, Copilot could make a noticeable difference.

If the real problem is disorganised files, unclear processes or too many manual steps, then no AI assistant is going to fix that on its own.

AI is becoming part of everyday work, and that’s not a bad thing. Just don’t let the marketing decide what productivity looks like in your business.

The best tool is still the one that solves your biggest daily headache.

If you want to know which tools could help your business best, I can help. Get in touch.

Are you still running Windows 10 because “it’s fine for now”?

I hear that a lot.

And to be fair, if you signed up for Extended Security Updates (ESU) programme, Windows 10 probably does still feel fine. It turns on. It works. It gets security updates. No drama.

But that feeling of safety is temporary.

Windows 10 officially reached the end of standard support back in October 2025. ESU was always meant to be a short-term safety net, not a long-term strategy.

And that net disappears in October 2026. After that point, Windows 10 stops receiving security updates altogether.

No patches. No fixes. No safety net.

What’s interesting is how many people are still putting this decision off.

Data shows that millions of PCs are still running Windows 10. Even in regions where support deadlines are well known.

Now, that data focuses on home users, but in my experience, many businesses are behaving the same way. They’re sticking with Windows 10 because it’s familiar and still technically supported.

And Microsoft hasn’t exactly made that decision feel urgent.

The same screen that warns you about the end of support also makes it very easy to enrol in ESU. One click, accept the terms, and you can carry on. For a lot of people, that feels like the problem has been solved.

It hasn’t.

ESU only buys you time. Once October 2026 passes, staying on Windows 10 means running an operating system with known vulnerabilities and no protection against newly discovered threats.

From a business point of view, that’s more than a technical risk. It’s a commercial one.

Cyber insurance, compliance requirements, and supplier expectations increasingly assume supported software.

At that stage, you’re left with two options: Upgrade to Windows 11, or replace the device entirely.

This is where planning matters. Some older PCs simply won’t support Windows 11. Others will but may need configuration changes or performance checks.

Leaving this until the last minute often leads to rushed purchases, unhappy staff, and unnecessary costs.

If you’re relying on extended support today, it should be part of a clear exit plan, not a holding pattern.

Because when ESU ends, Windows 10 drops off a cliff.

If you’re unsure whether your current PCs can upgrade or whether you’re heading for a last-minute hardware scramble, now’s a good time to review your options and plan the next step properly.

My team and I can help with that. Get in touch.

Have you noticed how many AI projects start with excitement… and then quietly go nowhere?

I’m seeing it a lot.

A demo here, a pilot there, plenty of internal chatter, but very little that makes it into day-to-day use.

And it’s not because AI doesn’t work or isn’t valuable.

In fact, a recent report suggests the opposite.

Around half of AI initiatives are still stuck in proof-of-concept mode, even though most businesses fully expect to increase their AI budgets.

Belief isn’t the problem. Momentum is.

What’s really holding things up is something far more familiar: Uncertainty.

Many businesses jump into AI with a vague sense that it’s important, but without a clear business problem they want it to solve.

When that happens, projects drift. Teams experiment, but no one can quite say what success looks like, how it will be measured, or when it’s good enough to roll out properly.

Governance is another big blocker.

Leaders worry about security, privacy, and compliance (and rightly so). But instead of putting simple guard rails in place, projects get paused while people wait for perfect answers.

The result is often no progress at all.

There’s also a skills gap.

AI sounds plug-and-play from the outside, but in practice it still needs people who understand how to manage it, monitor it, and step in when something looks wrong.

Most organisations aren’t short on ambition; they’re short on confidence.

Interestingly, businesses already know that AI won’t be fully hands-off any time soon.

Most AI decisions today are still checked by humans, and many leaders expect a long-term balance where people and AI share responsibility rather than one replacing the other.

That’s a sensible starting point.

So how do you stop AI initiatives stalling?

The businesses making progress tend to do three things well.

First, they tie AI to a specific, boring business outcome. Saving time in IT operations, improving system monitoring, speeding up reporting.

Not grand transformation but measurable improvement.

Second, they set clear boundaries. What can AI do on its own? What always needs a human check?

That clarity reduces fear and speeds up decisions.

And finally, they scale slowly and deliberately. Instead of throwing money at multiple tools and hoping something sticks, they prove value in one area, learn from it, and then expand.

AI doesn’t usually fail because it’s too advanced. It fails because it’s too vague.

If your AI projects feel stuck, the answer is clearer goals, better guard rails, and a willingness to move forward imperfectly, with humans firmly in the loop.

If you’re exploring AI but struggling to move forward, my team and I can help. Get in touch.

When was the last time you replaced a perfectly usable work computer, simply because it had become slow or unreliable?

For a lot of businesses, that moment is coming sooner than it used to.

Hardware prices have risen, upgrades cost more, and replacing machines that should have had a few good years left in them is now a painful expense rather than a routine decision.

The good news is that most computers don’t wear out suddenly. They slow down gradually, often because of small, fixable issues rather than failing hardware.

And with Windows 11, there are a few sensible habits that can extend the life of your devices.

One of the biggest drains on performance is software clutter.

Over time, PCs collect apps that start automatically, run in the background, and use up memory and processing power.

The computer feels old, but in reality, it’s overloaded.

Keeping startup apps under control and removing software that’s no longer used helps your PC spend its energy on actual work, not housekeeping.

Updates also matter more than many people realise.

They’re not only for new features or security warnings. Updates fix bugs that cause crashes, performance issues, and file corruption.

Left unresolved, those problems can snowball into system failures that make a device feel beyond saving.

Staying up to date can be the difference between a PC that lasts four years and one that lasts six.

Storage is another hidden pressure point.

When a drive gets too full, everything slows down: Updates fail, apps struggle, and the system has less room to manage itself properly.

Regularly clear out unused files and applications. That gives Windows space to breathe and reduces wear on modern solid-state drives (which are expensive to replace).

Security also plays a role in longevity. 

Malware doesn’t just steal data; it consumes resources, increases background activity, and can shorten the life of a system.

Make sure you have the right security tools in place to keep your business protected. And keep your people up to date on cyber security best practice.

For laptops, power habits matter too. Constant heat, full charging all the time, and deep battery drain all accelerate battery wear.

Small changes in how devices are charged and used can delay the point where a laptop becomes desk-bound because the battery no longer holds up.

Finally, backups deserve a mention.

When something does go wrong, businesses often replace machines in a rush because they’re worried about losing data.

Reliable backups remove that panic. If data is safe, you can repair or recover a system instead of writing it off early.

None of this is dramatic. There’s no single magic tweak. But taken together, these small habits add up.

With hardware costs rising, extending the working life of your Windows 11 PCs is a smart financial move, as well as good IT hygiene.

Want to see where a few small changes could save your PCs? Get in touch.

If phishing scams are supposed to trick people, why do so many of them still feel clumsy?

For years, the answer was simple: Most scams were mass-produced.

The same email, the same fake website, sent to thousands of people and hoping a few would fall for it.

That approach is still around, but it’s starting to evolve.

When generative AI first appeared, there was a lot of talk about “dynamic websites”.

Instead of one fixed site for everyone, pages would be generated on the spot, shaped by who you are, where you are, and what device you’re using.

That future never really arrived for everyday businesses. It was complex and rarely worth the effort.

Cyber criminals, however, don’t need perfect systems.

They need something convincing.

Security researchers have shown how this idea could be used for phishing. While it’s still largely experimental, it gives a clear picture of the next generation of scams.

A victim clicks a link and lands on a webpage that looks harmless. There’s no obvious malicious code sitting on the page.

Once it loads, the page asks a legitimate AI service to help generate content.

That content is then assembled and run directly in the person’s browser.

The result is a phishing page that’s created especially for that visitor.

The wording, layout and code can all be different every time. There’s no single fake website for security systems to spot and block, because the scam doesn’t fully exist until someone opens it.

Before you panic, this method isn’t widespread yet. But the building blocks are in use.

AI is being used to write malicious code, malware is increasingly assembled as it runs, and AI-assisted scams are becoming more common.

For you, this changes the rules slightly.

Phishing is no longer just about spotting bad spelling or sloppy design. Future scams may look even more polished, personalised and completely legitimate.

That’s why modern protection focuses less on “don’t ever click the wrong thing” and more on limiting the damage if someone does.

Tools like multi-factor authentication, secure browsers and email filtering still work, even when a fake page looks convincing.

Remember this: Phishing isn’t going away. It’s getting smarter.

To stay protected now you must assume the next scam will look professional and make sure your defences don’t rely on people spotting obvious mistakes.

Want to check how exposed your business is? Get in touch.

Let me ask you a slightly uncomfortable question.

Do you know which AI tools your team is using at work… and what they’re putting into them?

Most business owners I speak to think they do. And then we dig a little deeper.

Generative AI tools like ChatGPT and Gemini have slipped into everyday work incredibly fast. They’re great for productivity. Drafting emails. Summarising documents. Brainstorming ideas. Solving problems faster.

The trouble is, they’ve arrived so quickly that governance hasn’t kept up.

A recent report looked at how businesses are using GenAI, and the findings are eye-opening.

AI usage in organisations has surged. The number of users tripled in just a year.

People aren’t just trying it out either. They’re relying on it. Prompt usage has exploded, with some organisations sending tens of thousands of prompts every month.

At the very top end, usage runs into the millions.

On the surface, that sounds like efficiency.

Underneath, it’s something else entirely.

Nearly half of people using AI tools at work are doing so through personal accounts or unsanctioned apps.

This is called “shadow AI”. It means staff are uploading text, files, and data into systems the business doesn’t control, can’t see, and can’t audit.

That’s where the risk creeps in.

When someone pastes information into an AI tool, they’re not only asking a question. They’re sharing data.

Sometimes that data includes customer details, internal documents, pricing information, intellectual property, or even login credentials. Often without you realising it.

According to the report, incidents involving sensitive data being sent to AI tools have doubled in the last year. The average organisation now sees hundreds of these incidents every single month.

And because personal AI apps sit outside company controls, they’ve become a significant insider risk. Not malicious insiders, necessarily. Well-meaning people trying to get their job done faster.

This is where many businesses get caught out. They assume AI risk looks like hacking from the outside.

It can look like an employee copying and pasting the wrong thing into the wrong box, at the wrong time.

There’s also a compliance angle here.

If you operate in a regulated environment, or handle sensitive customer data, uncontrolled AI use can put you in breach of your own policies, or someone else’s regulations, without anyone noticing until it’s too late.

The warning is blunt: As sensitive information flows freely into unapproved AI ecosystems, data governance becomes harder and harder to maintain.

At the same time, attackers are getting smarter, using AI themselves to analyse leaked data and tailor more convincing attacks.

So what’s the answer?

It’s not banning AI. That ship has sailed. And it’s not pretending it’s harmless either.

The real answer is governance.

That means deciding which AI tools are approved for work use. Being clear about what can and cannot be shared with them. Putting visibility and controls in place so data doesn’t quietly drift where it shouldn’t. And making sure your team understands the risks, not in a scary way, but in a practical, grown-up one.

AI is already part of how work gets done. Ignoring it doesn’t make it safer. Governing it does.

We can help you put the right policies in place and educate your team on the risks of AI. Get in touch.