Setting Up IT for a New Business: What You Actually Need, and When

Most advice about IT for new businesses is written by people who want to sell you IT. So it tends to arrive as a long list of products without much sense of what matters and what doesn’t.

The more useful framing is that a small number of decisions need getting right at the start, because a few of them are expensive to unpick later, and that the ongoing side is worth putting on a predictable footing early rather than dealing with reactively.

This is a practical guide to both.

The Things That Are Painful to Fix Later

If you do nothing else, do these properly.

Register your domain in the business’s name

Your domain name should be registered to the business, in an account the business controls, with a business email address as the contact.

What happens otherwise is entirely predictable. A founder registers it on a personal account with a personal email. Three years later that person has left, or the renewal notice goes to an address nobody checks, and the domain lapses. Recovering a domain you can’t prove you control is genuinely difficult.

Same principle for every account you open: hosting, cloud services, software subscriptions. Business name, business email, and a record of where they all are.

Use a business email address from the start

Not a free consumer email account. A proper address on your own domain, hosted properly.

It matters for credibility, and it matters practically. When someone leaves, you can take over a company mailbox. You cannot take over their personal account, and any client correspondence in it goes with them.

Turn on multi-factor authentication immediately

On email, on cloud storage, on your domain registrar, on anything financial. It is the single most effective security measure available to a small business, it costs nothing, and it is far easier to establish as a habit at three people than to retrofit at thirty.

Write down where everything is

Which accounts exist, who controls them, where the domain is registered, what you’re paying for. A single document is enough. Most businesses only discover they needed it when the person who knew everything is unavailable.

The Practical Setup

Devices

Buy business-grade rather than consumer machines. They cost a little more and last longer, come with better warranty options, and, importantly, business editions of Windows support the management tools you’ll want later. Consumer editions don’t, which means replacing machines sooner than you’d planned.

Email and file storage

Microsoft 365 or Google Workspace will cover email, documents, and file storage for almost any new business. Pick one and commit, because running both creates confusion about where things live.

If you go the Microsoft route, our Microsoft 365 page covers what’s involved. Worth reading our guide to Microsoft 365 licensing before buying, since plan choice affects what you can do later.

File structure

Spend an hour deciding how files will be organised before you have any. Where client work lives, where internal documents live, who can see what.

This feels unnecessary at two people and is genuinely painful to impose at twenty, once everyone has developed their own habits.

Backup

Cloud storage is not the same as backup. Cloud services protect you against losing a laptop; they don’t reliably protect you against someone deleting a folder, or ransomware, or a mistake nobody notices for months.

Proper backup of your cloud data is inexpensive and worth having from early on.

Security basics

Beyond multi-factor authentication: endpoint protection on every device, a password manager so people aren’t reusing credentials, and automatic updates enabled. That covers the majority of realistic risk for a small business. Our cyber security page goes further.

Connectivity and phones

At the start, decent broadband and mobiles may be all you need. As you grow, or if you take a lot of inbound calls, a proper business phone system becomes worthwhile, and the connection needs to support it. Our pages on business connectivity and Microsoft Teams Phone cover the options, and we’ve written about what moving to a cloud phone system involves.

Or Let Us Do the Whole Thing

Everything above is a list of jobs, and if you’re setting up a business you already have a long list of jobs.

We can take the lot: register your domain, set up your email and cloud platform, configure security including multi-factor authentication, supply and set up your devices, organise your file structure, put backup in place, and sort your connectivity and phones. You end up with a working, secure setup on day one rather than a to-do list you’ll get to eventually.

One thing we do differently, and it matters

Everything gets registered in your business’s name, in accounts your business owns and controls. Your domain is yours. Your Microsoft tenant is yours. Your accounts are yours.

That sounds obvious, and it isn’t universal. It’s common for providers to register domains and services in their own accounts, which is fine while the relationship is good and a genuine problem if you ever want to move. We’d rather you were never in that position, which is also why we’ve written openly about what to check before switching provider.

You get the convenience of someone else doing the work, and you still own everything at the end of it.

Why a Support Contract Makes Sense From Day One

There’s a common assumption that support contracts are for businesses with enough staff to justify one. In practice the argument is often strongest at the smallest end.

Your time is the business. If you’re a sole trader or a very small team, an afternoon spent trying to fix your own email is an afternoon not earning. There’s no colleague to cover, and the work doesn’t move while you’re troubleshooting. That’s a real cost, it just never appears on an invoice.

Fixed costs beat surprises. Ad hoc support is charged by the hour, which means your IT costs are unpredictable by design, and they’re highest exactly when something has already gone wrong. A fixed monthly fee turns that into a line in your budget you can plan around. For a business watching cash flow closely, predictability is worth a great deal.

You have the least slack. A larger business that loses a laptop or an email account has other people and other machines. A one-person business has neither. The consequences of a problem are proportionally bigger, not smaller.

Small businesses get attacked too. Most cyber attacks aren’t targeted, they’re opportunistic, which means size offers no protection. What differs is that a small business has less capacity to absorb the disruption.

It’s one thing off your list. Probably the real benefit. Monitoring, updates, backups and security get handled without you thinking about them, which means they actually happen rather than sitting on a list of things you’ll get to.

Worth understanding what a contract does and doesn’t cover before signing, and our article on what unlimited support actually means sets out the questions to ask.

One thing you almost certainly don’t need

A server. Very few new businesses do. Cloud services cover what a server used to, without hardware in a cupboard. We’ve written about why businesses end up with a server nobody understands, which is worth avoiding from the start.

What Changes As You Grow

Your IT needs shift as you add people, and there are recognisable points where the requirements step up.

At your first few hires

Someone has to set up accounts, order a laptop, configure email, and grant access to the right things. Then remove all of it when someone leaves. Informally this is fine once. By the fourth or fifth time it’s a process, and if nobody owns it, things get missed. Leftover access for departed staff is one of the most common problems we find.

When somebody becomes the accidental IT person

In most growing businesses, one person turns out to be slightly better with computers than everyone else. Over time they absorb an unofficial support role, usually on top of the job they were actually hired for.

If that’s happening, it’s costing you their real work, and it’s a single point of failure. It’s also easily solved.

Somewhere around ten to twenty people

Patching, monitoring, consistent device configuration, access control and backup verification stop being things you can keep on top of casually. Not because any one is difficult, but because they need doing routinely, and routine tasks with no owner don’t happen. Our article on the IT jobs businesses forget covers what tends to slip.

When a client asks about your security

Larger clients increasingly ask suppliers about security during procurement, sometimes requiring Cyber Essentials certification. That’s often the moment a growing business discovers its arrangements are more informal than it thought. Our guide to Cyber Essentials covers what’s involved.

When you add a second location, or go hybrid

Multiple sites, or people working from anywhere, changes what you need from your network, your security and your phone system. It’s a good moment to plan rather than extend.

What to Look for When You Do Need Support

• Understand what’s covered and what isn’t. Our article on what unlimited support actually means covers the questions worth asking.
• Check the pricing model, usually per user or per device, and how it changes as you grow.
• Ask about onboarding and offboarding, since with growth that becomes routine work.
• Ask what proactive work is included, not just what happens when you report a fault.

Our IT support for startups and small business IT support pages set out how we work with businesses at each stage.

The Short Version

Get the domain, email, accounts and multi-factor authentication right from day one, in the business’s name, written down. Buy business-grade devices. Pick one cloud platform. Back it up.

Or hand the whole lot to us and we’ll set it up properly, in your name, so you can get on with the business.

Then put support on a fixed monthly footing so it stays handled and stops being something you have to think about, and revisit the setup as you grow, particularly when you start hiring regularly, add a second location, or a client begins asking about your security.

Starting Out or Growing?

CCSW supports businesses across Cardiff and South Wales at every stage, from startups through to established small and medium businesses, with fixed monthly pricing and no surprises.

If you’re setting up and would rather someone else did the whole thing, or you’d like a conversation about what your business needs, get in touch or call 0333 014 4544.