Learn / How-To
How-To
Practical, searchable instructions for technology, cybersecurity, AI, compliance, and business resilience work.
How to use this collection
Bring a current decision and keep the evidence attached.
Use these instructions when a real task is already on the calendar. The steps are written for working sessions, with the inputs, decisions, owners, and evidence that keep a checklist from becoming shelfware.
Each guide links the procedure to a practical assessment, workbook, method, or next conversation so the team can move from reading to a recorded action.
- What must be true before the work starts?
- Which evidence proves the step is complete?
- Who approves exceptions and follow-through?
Browse how-to
Choose the question closest to the work in front of you.
Each article opens with a direct answer and links to the related method, solution, or working resource when one applies.
How to Build a Technology Roadmap Leadership Can Use
A technology roadmap connects business context and current evidence to priorities, owners, costs, dependencies, retirement decisions, and measures.
Read how-toBefore You Automate a Process, Fix the Process
Automation speeds up every existing decision, including the unnecessary ones. Simplify the work, define exceptions, and measure the baseline before adding AI.
Read how-toHow to Run a SaaS Rationalization Exercise
Find each subscription, map ownership and overlap, measure use, review data and contracts, then remove or consolidate without breaking the business.
Read how-toA Framework Is Not a Control Set
Use NIST CSF 2.0 as a common decision language. Score current and target profiles, weight gaps by business criticality, and work a short, owned priority list.
Read how-toThe 90-Day AI Rollout Plan for a 50-Person Business
A week-by-week plan for putting AI into a small business without creating a data leak, a shelf-ware license bill, or a staff revolt.
Read how-toWriting an AI Acceptable Use Policy Your Employees Will Actually Follow
Most AI policies are unreadable and unenforced. Here is a two-page structure that works, plus a free template you can adapt in an afternoon.
Read how-toThe Voice on the Phone Is Not Your CFO
Voice cloning and deepfake video have made verbal authorization worthless. The callback rule that stops wire fraud, written so your bookkeeper can follow it.
Read how-toScore Your IT Provider: The 40-Point 3AM Test Audit
A scored audit of your current IT provider across eight categories. Run it in an hour and find out whether you have a partner or a vendor.
Read how-toThe Microsoft 365 Settings Most Phoenix Businesses Never Turned On
A concrete hardening baseline for Microsoft 365 in a small business, with the specific settings, why each matters, and what breaks if you rush it.
Read how-toAnyone Can Send Email as Your Company Until You Fix This
SPF, DKIM, and DMARC explained without jargon, plus a staged rollout plan that gets you to enforcement without breaking your invoices and newsletters.
Read how-toRun a 60-Minute Ransomware Drill With Your Leadership Team
A complete facilitator kit for a one-hour tabletop exercise: the scenario, the injects, the questions that expose gaps, and the after-action format.
Read how-toOffboarding an Employee in 60 Minutes
Departing employees keep access far longer than owners realize. A sequenced checklist covering identity, devices, SaaS, physical access, and the accounts nobody remembers.
Read how-toHow to Switch IT Providers Without a Bad Month
A 30-day transition plan for changing managed service providers, including the credentials to secure first and the bargaining power you lose after you give notice.
Read how-toThe Quarterly Technology Review Every Owner Should Demand
Most QBRs are a ticket count and a slide of green checkmarks. Here is the agenda that makes the meeting useful, and the numbers your provider should bring.
Read how-to