The 30-Minute IT Check Every Small Business Should Do Once a Month
Article Summary: Most IT problems don’t appear out of nowhere. Backups quietly stop running, updates sit unfinished for weeks, and old staff accounts stay active for months. A short monthly IT checklist catches these problems while they’re still cheap to fix. This post covers the six things to look at.
Most owners only look at their IT after something has gone wrong. A file won’t open, a laptop won’t start, or an invoice gets paid into a scammer’s account. Fixing the problem at that point costs far more than preventing it would have.
Almost none of it happens without warning. The backup that fails when you finally need it had been failing for weeks. The account a scammer used belonged to someone who left last year. Thirty minutes a month is usually enough to catch these problems early.
At Pacific Edge Technology, we help businesses across Richland, Kennewick, and Pasco stay ahead of IT problems. Here’s a simple monthly IT checklist any owner or office manager can run.
Why a monthly check is worth the time
Verizon’s 2026 Data Breach Investigations Report found that 31% of breaches started with attackers exploiting known software flaws. That makes unpatched software the most common way in, ahead of stolen passwords. The same report found that the median time to fully fix a known flaw rose to 43 days.
In many of these breaches, the flaw was already public and a fix was already available. Nobody had installed it yet.
Your monthly IT checklist
1. Updates
Check whether Windows updates are actually installing on your computers, or sitting at “restart required” week after week. Do the same for phones and your most-used software, like your browser and accounting app. If people keep clicking “remind me later,” that’s a problem to fix.
2. Backups
Open your backup tool and look at the last few runs. You want recent successful backups, not a list of errors. Then check when anyone last restored a file from it. If nobody has ever tested it, you don’t know whether it works.
3. Who has access
Pull up the list of user accounts in Microsoft 365 or Google Workspace and read through it. Every name should belong to someone who still works for you. Look for former employees, contractors who finished months ago, and shared logins like “office” or “admin.” Turn off anything you don’t need.
4. Multi-factor authentication
Confirm that MFA is on for everyone, not just the people who set it up first. Pay closest attention to admin accounts and anyone who handles money. According to Microsoft’s research, MFA blocks more than 99.2% of account compromise attacks.
5. Devices
Look at what’s connected to your systems. If you see a laptop or phone you don’t recognize, find out whose it is. While you’re there, check that laptops are encrypted. Also confirm that any phone with company email has a passcode or fingerprint lock.
6. Subscriptions and licenses
Open your billing page and review what you’re paying for. Businesses often keep paying for licenses that belong to former employees, or for two tools that do the same job. This review also reveals software someone signed up for without telling anyone.
Make it a routine
Put the check on your calendar for a fixed day, like the first Monday of the month. Assign it to the same person each time, whether that’s you or whoever handles the admin side.
Keep a running note of what you checked and what you found. After a few months, you’ll see whether the same problem keeps coming back. If it does, it needs a real fix instead of a monthly cleanup.
The 30-minute target only works if you don’t stop to fix things along the way. Write down what you find and deal with it afterward.
Who fixes what
Most findings are small, like a laptop that needs a restart, a license to cancel, or an account to turn off. Handle those yourself.
Send the rest to your IT provider. That includes backups that keep failing, MFA that won’t turn on for someone, a device nobody recognizes, and updates that fail on the same machine every month. These usually point to a bigger problem underneath.
What this checklist doesn’t replace
A monthly IT checklist isn’t monitoring. A good IT provider uses tools that watch your systems around the clock and flag things you’d never spot from a monthly glance.
Your check covers what those tools can’t know. You know who left, which subscriptions you approved, and whose laptop is whose.
If you’re a Tri-Cities business and want help getting started, get in touch with Pacific Edge Technology. We’ll show you where each item lives in your systems and handle the fixes, so your monthly IT checklist stays quick.
Monthly IT Checklist FAQs
How often should a small business check its IT?
Once a month works for this list. If losing a day’s work would seriously hurt, check backups more often, since they’re the item most likely to fail quietly.
Who should do the check?
You or whoever runs the admin side of the business. Most of the list needs no technical skill, just someone who knows who works there and what the business pays for.
What if I don’t know where to find any of this?
Ask your IT provider to walk you through it once and write down where each item lives. Many providers will also send you a monthly summary that covers most of it.
Isn’t this my IT provider’s job?
Your provider handles the monitoring, patching, and fixing. The monthly IT checklist covers the parts that depend on knowing your business, like who left last month or which subscription nobody approved.
If I only have ten minutes, what matters most?
Backups and updates. Without working backups, you could lose everything you’ve stored. And unpatched software is now the most common way attackers get in.
Does this apply if everything we use is in the cloud?
Yes. Cloud tools still need updated devices, working backups, MFA, and access lists that match who actually works for you.
Sources and further reading
- Verizon 2026 Data Breach Investigations Report. The source for the finding that 31% of breaches start with exploited software flaws, and that the median time to fully fix a known flaw is 43 days.
- Microsoft: Plan for mandatory Microsoft Entra multifactor authentication. Microsoft’s research showing MFA blocks more than 99.2% of account compromise attacks.
This Article has been Republished with Permission from The Technology Press.
