IT and POPIA checks for small businesses
Know where your business stands, in one afternoon.
Most small businesses have a few gaps they don't know about: someone who left last year and can still log in, a domain registered to an old web developer, backups nobody has tested. I'll find them, fix the quick ones while I'm there, and give you a one-page report in plain English. A fixed price, all done remotely.
- Pricing
- Fixed, agreed upfront
- Where
- Remote, anywhere in SA
- What I sell
- Advice, not software
| Status | Finding | Outcome |
|---|---|---|
| Red | Former staff access2 people who left last year can still sign in to email | Fixed today |
| Red | Domain controlDomain registered to a previous web developer | Action |
| Amber | Two-step sign-inOn for 4 of 9 users | Fixed today |
| Amber | Email securityNo DMARC record, so anyone can send email as you | Fixed today |
| Green | BackupsDaily, and a test restore worked | Good |
| Amber | POPIA basicsInformation Officer not registered; no privacy notice | Action |
How does your business score?
Six quick questions taken straight from the full check. If you're not sure of an answer, choose "Not sure". That's usually a sign it's worth a look.
The six things I look at
These are where I most often find problems. It works whether you use Microsoft 365 or Google Workspace, there's nothing to install, and your day carries on as normal.
Who can get in
Former staff who can still log in, shared passwords, forgotten accounts, and how many people have full admin rights.
Two-step sign-in
Whether everyone needs a code from their phone to log in. It's the single best protection you can switch on.
Your domain
Who actually owns your web address, who has the login, and when it's due for renewal.
Email security
The settings that stop criminals sending fake invoices in your name. (They go by SPF, DKIM and DMARC.)
Backups
What's backed up, what isn't, and a real test that a file can actually be restored.
POPIA basics
Whether your Information Officer is registered, and whether you have the basic documents: a privacy notice, a breach plan and supplier agreements.
Simple, fixed prices
No hourly billing. You pay half upfront and half when you get your report.
POPIA Starter
- An hour with you and your staff, explaining what POPIA means for you
- I register your Information Officer for you
- A basic privacy notice for your business
- A one-page "what to do if something goes wrong" sheet
IT & POPIA Check
- All six areas checked, remotely
- Quick fixes done while I'm there
- A one-page report, marked green, amber and red
- A 30-minute call to talk you through it
- My access removed when we're done
Quarterly re-check
- The six areas checked again
- New and departed staff sorted out
- Your POPIA documents kept up to date
- Cancel any time
What happens after the check
If the check finds something that needs more than a quick fix, you get a fixed quote for each item in your report, with no obligation. Many businesses fix things themselves using the report.
I'm not VAT-registered, so these are the full prices. This is practical IT and POPIA help, not legal advice.
From first call to report in about a week
- 1
A quick chat
Fifteen minutes on the phone so I understand your business and we both know the check is a good fit.
- 2
Temporary access
You set up a temporary login for me, and I confirm in writing exactly what I'll look at.
- 3
The check
One afternoon, done remotely. I only change things you've said yes to.
- 4
Your report
A one-page report, a 30-minute call to go through it, and my access removed.
Never heard of POPIA? You're not alone.
The Protection of Personal Information Act applies to every South African business that keeps details about customers or staff, however small. For most businesses, getting the basics right takes a few hours, not a legal team.
There's a lot of scary talk about POPIA fines. The reality is more practical: know what personal information you keep, look after it, and know what to do if something goes wrong.
Free talk for business groups
I run a free 45-minute session called "POPIA in Plain English" for business chambers, accountants' clients and community groups, in person in Cape Town or online anywhere. Five practical things to do this month, and plenty of time for questions.
Ask about a talkPaul Nain
[Bio: years in IT, current role in financial services IT, main areas such as Microsoft 365, information security and POPIA governance.]
Small businesses face the same risks as big ones, usually without anyone whose job it is to spot them. That's the gap I started Clearpath Advisory to fill.
Why independent matters
Plenty of IT companies offer a free "health check". It's usually how they sell you licences or a monthly contract. I charge a fixed fee instead, so I've got no reason to find problems that aren't there.
Book your free 15-minute call
Email me your business name and roughly how many people work there, and I'll get back to you within one working day. I work with businesses anywhere in South Africa.