Articles
Everything published so far, newest first.
- Audits & compliance
Getting ready for a CJIS technical security audit
What the auditor will actually want to see, how to scope it, and how to answer the questionnaire without promising things you can't back up.
- Audits & compliance
Meeting the CJIS MFA requirement on a small-agency budget
The audit question is simple. Answering "yes" honestly takes more than turning on MFA for email. Here's what's in scope and the practical ways small agencies get there.
- Phones & PBX
Locking down an on-prem phone system that's exposed to the internet
Scanners find internet-facing phone systems within minutes. Here's how to cut the exposure, stop toll fraud, and keep the admin interface off the public internet.
- Active Directory
Retiring old domain controllers before Server 2016 support ends
Windows Server 2016 leaves extended support on January 12, 2027. Here's a safe, step-by-step way to replace old domain controllers in a small domain.
- Networks
Getting building automation off your office network
HVAC and building controls often sit on the same network as office PCs, speaking a protocol with no authentication. Here's how to separate them without breaking the heat.
- Field notes
Why this site exists
Small offices run on one IT person or a contractor who drives in. This site is written for them.