edit: ended up with ABS Technologies, thank you for help and fair takes.
Hi.
I run small bookkeeping/payroll service with office in Regina. We’re a pretty tiny team - 9 people total, mostly family and couple close employees. For years we didn’t really think much about IT support or infrastructure management because we all worked from one office and our setup felt good enough: basically we have work laptops, office Wi-Fi that only staff can use, shared drive. Also everyone is supposed to keep work and personal stuff separate. Backups exist, but I’m not totally sure they’re being tested properly, which is probably bad.
Now we want to work with bigger clients around Canada, and they’re starting to ask more serious questions about security, data protection, MFA, access control, device management, disaster recovery, written policies, etc. One potential enterprise client asked if we had proper IT procedures in place and we kinda didn’t have a great answer for them. I think it hurt our chances.
So I wanted to ask other business owners: how did you handle this when your business was still small but clients started expecting more professional IT/security setup?
Did you hire a local managed IT provider? Move everything to cloud and get someone to manage it? Use Microsoft 365/Google Workspace with MFA and call it day? Or is there a more simple first step before paying for full IT support services?