Posts

Start the New Year with an Effective IT Budget

Connect with a Cloud Advisor

UPDATED: January 9, 2026 — Added additional resources (see below).

Many small businesses tend to react to IT expenses instead of planning ahead with a clear budget in place. A subscription renewal arrives, a laptop fails, or a new tool seems useful, and you make a decision in the moment. While this day-to-day approach can work in the short term, it generally leads to fragmented spending and technology that does not fully support your long-term goals. Over time, this lack of planning becomes more than an inconvenience.

If you do not have an IT budget, there is no such thing as an “in-budget” IT purchase. 

Every unplanned expense adds costs and introduces uncertainty, putting profit at risk. With a budget in place, you get clarity on current spending and can plan ahead instead of scrambling.

Step into the new year with more control by following this simple process that gives you a complete view of your IT.

> Document Your Recurring IT Expenses

Review all subscriptions, service agreements, and other recurring IT expenses. Check invoices and scan credit card statements. Look for monthly or annual services that renew quietly in the background.

Create a list of your recurring IT expenses, tracking costs by month. For a full picture, total your monthly and annual IT spending for each item.

> Inventory Your Hardware and Software

Create a list of all your computers, printers, networking gear, and other devices. Do the same for purchased (non-subscription, non-SaaS) software. Note purchase dates, warranty dates, and expected lifespans for each item.

Create a replacement schedule by month for any hardware and software you plan, or need, to replace or upgrade in the coming year.

> Remove What No Longer Serves You

Cleaning up your IT takes thought. Review your recurring services and hardware/software lists to identify duplicate services and items no longer used or needed. Plan when you will remove or retire unnecessary services, equipment, and software.

Decluttering frees up your budget and keeps your team focused. If changes require data migration, equipment disposal, or extra training, schedule these steps in advance to stay prepared.

> Identify Initiatives You Want to Fund

You will likely want or need to add new technology or tools in the coming year. Break down each initiative and estimate upfront and ongoing expenses. Be clear about timing. Some projects require deposits or advance orders, while others only begin billing once services are delivered. Map payments by item and month to project cash flow and avoid unexpected issues.

> Create a Single Cohesive Budget

After tracking recurring expenses, mapping replacements and upgrades, and planning new initiatives, combine everything into one organized view of your IT spending. Add up your expenditures monthly, quarter, and annually, including totals for each line item and category. This provides you with a full view of your budget, cash flow requirements, and project timing.

A single, consolidated budget transforms scattered technology activity into a predictable, manageable plan.

eBook - Smart IT Budgeting Pays OffIT Budget Workbook Template

How We Help

Dive deeper with our recent Smart IT Budgeting Pays Off” eBook for a deeper dive into the process for building an effective IT Budget.  You can also download our IT Budget Workbook Template to help you get started.

Our Cloud Advisors help you put your IT plans into action. We assess your current technology, identify productivity and security gaps, remove redundant services, identify opportunities, train your team, and help you manage IT projects and your overall IT ecosystem.

No matter your starting point, book time with us to create your IT plan for 2026 and take control of your technology and spending.

About the Author

Bill Seybolt bio pictureBill is a Senior Cloud Advisor responsible for helping small and midsize organizations with productive, security, and secure managed cloud services. Bill works with executives, leaders, and team members to understand workflows, identify strategic goals and tactical requirements, and design solutions and implementation phases. Having helped hundreds of organizations successfully adopt cloud solutions, his expertise and working style ensure a comfortable experience and effective change management.

Turn AI Prompts Into Business Outcomes

Artificial intelligence (AI) is evolving rapidly, providing you with powerful tools that can transform how your organization operates. By integrating it into your daily workflows, you can make smarter decisions and streamline tasks that once took significant time to complete. Over time, AI will produce measurable results that are easy to track and analyze.

How AI Can Work for You

You get the most value from AI when you apply it to targeted, repeatable processes that address real business needs. For example, regularly analyzing meeting transcripts with AI can uncover actionable insights and identify trends that guide your business strategy.

AI can also assist in creating communications and marketing content that reflect your brand’s voice. Moreover, it can generate structured agendas or talking points for sales conversations, allowing you to emphasize client relationships and highlight your business’s strengths.

By making AI a regular part of your workflows, you can continuously refine outputs and achieve more accurate results over time.

Getting Started with AI

Connect with a Cloud Advisor
For those just starting out with AI, begin with smaller projects. For example, try using AI to automate follow-ups or analyze customer feedback. These use cases will help your team become familiar with AI while still delivering immediate impact. Over time, incorporate AI into more complex processes.

Give your organization the opportunity to explore its full potential without disrupting daily operations.

You should regularly monitor AI outputs to make sure that the technology and uses align with your goals. Tracking data usage also helps you keep information secure and will help maintain trust.

Crafting Effective Prompts

Once you are familiar with AI, you can unlock its full potential by providing clear context and direction. You and your team should know how to craft a prompt that helps AI fully understand your objectives and your voice.

A strong prompt includes the following elements:

  1. Persona: Decide the role you want AI to take on. Defining a persona helps shape the perspective, tone, and level of expertise AI uses in its response.
  2. Backstory: Share context about your business, your customers, and the tone or results you expect.
  3. Task: Be specific about what you want AI to produce. Include your brand voice, target audience, and any formatting preferences.

For example, you might ask AI to take on the persona of a knowledgeable and approachable communications expert. Then, provide it with the backstory of your company and set a confident, friendly tone aimed at small business owners. Finally, be clear about the task, such as writing a professional announcement in your brand voice. Be sure to include any formatting preferences, like short paragraphs for easy readability.

Using AI Responsibly

In order to adopt AI responsibly, pay careful attention to sensitive business and client information. Selecting AI tools that meet strong standards for privacy, security, and compliance helps you protect this information and maintain trust with your clients and stakeholders. Beyond selecting the right tools, establish clear protocols to guide your team’s use of AI.

Your policies should:

  1. Define safe usage: Clearly outline how AI should be used across your organization. Clear safe usage guidelines prevent misuse and ensures your team can confidently rely on AI.
  2. Ensure compliance with regulations: Establish rules that keep your organization aligned with legal, industry standards, and contractual obligations. These rules should address the protection of sensitive client information, along with adherence to data privacy laws and governance policies.
  3. Encourage creative applications: Support your team in exploring innovative approaches to problem-solving. Creative applications and use cases allow your organization to maximize the benefits of AI while generating tangible results.

AI is a powerful tool that can enhance business processes and strengthen client relationships. When it is used properly, your organization can achieve meaningful and lasting results.

How We Help

You can dive deeper into crafting effective prompts by viewing our November 2025 3T@3 Series session, How To: Better AI Results” and several eBooks and other resources in our Resource Center. Our Cloud Advisors are here to help you plan, execute, and succeed. Book some time and start your journey.

About the Author

Allen Falcon is the co-founder and CEO of Cumulus Global.  Allen co-founded Cumulus Global in 2006 to offer small businesses enterprise-grade email security and compliance using emerging cloud solutions. He has led the company’s growth into a managed cloud service provider with over 1,000 customers throughout North America.

Simplify Your IT Strategy

UPDATED: January 2, 2026. Added related resources (see below).

As a small to medium-sized business (SMB) leader, you already know how tough IT decisions can be. From software to infrastructure, every choice affects your efficiency, budget, and long-term growth. One of the biggest challenges is decision-making paralysis. With so much information coming at you, it’s easy to feel overwhelmed and unsure about which details actually matter. The key is learning how to manage that information effectively.

Managing Information Overload

Access to information can be both a benefit and a burden. Thanks to search engines and AI-powered tools, you can gather data faster than ever. But too much information can feel like noise if you don’t know where to start.

Connect with a Cloud AdvisorTo cut through the clutter, start by identifying your core business goals and IT priorities. This will help you filter out irrelevant information and zero in on what truly supports your objectives. Additionally, you should lean on trusted sources and expert insights, as they provide accurate, reliable information that helps you make decisions based on facts rather than assumptions.

When you create a structured approach to research, you turn information overload into informed decision-making.

Evaluating Your Options

After narrowing your focus, the next step is choosing the right solution. With so many options available, it’s easy to second-guess your choices. A structured evaluation process helps you stay objective and confident.

  1. Define your key requirements and goals: Identify what your business truly needs from an IT solution. Use these requirements as benchmarks to quickly rule out any options that don’t fit.
  2. Research your top contenders: Take a closer look at the solutions that meet your criteria. Watch product demos, read case studies, and, if possible, talk to current users to understand real-world experiences.
  3. Evaluate long-term performance: Ask how each option will scale with your business, how reliable the vendor’s support is, and how easily it integrates with your current systems.

Following these steps will help you minimize risk and choose solutions that support lasting growth.

Putting a Process in Place

Once you’ve evaluated your options, you should put a clear process in place to ensure that your decisions align with your business goals.

  1. Form a team of key stakeholders to gain diverse perspectives and ensure all relevant viewpoints are considered.
  2. Set a timeline with milestones to keep the decision-making process on track and maintain momentum.
  3. Use decision-making frameworks such as SWOT analysis or a Decision Matrix to compare options objectively.
  4. Document your reasoning throughout the process to maintain transparency and create a reference that supports future decisions.

In Summary

IT decision-making doesn’t have to feel overwhelming. The right approach not only helps you choose the best solutions but also saves time, reduces stress, and positions your business for growth. Start small, stay focused, and turn decision-making from a hurdle into a strength for your SMB.

How We Help

We provide the structure, communication, and support your team needs to succeed. From defining roles and prioritizing tasks to managing follow-ups and challenges, our professional services help keep your IT systems in sync with your business priorities so projects move forward efficiently.

Our Cloud Advisors help you put your IT plans into action. We assess your current technology, identify productivity and security gaps, remove redundant services, identify opportunities, train your team, and help you manage IT projects and your overall IT ecosystem.

eBook - Smart IT Budgeting Pays OffIT Budget Workbook Template

Related Resources

Take the next step with our recent Smart IT Budgeting Pays Off” eBook for a deeper dive into the process for building an effective IT Budget.

You can also download our IT Budget Workbook Template to help you get started.

No matter your starting point, book time with us to create your IT plan for 2026 and take control of your technology and spending.

About the Author

Allen Falcon is the co-founder and CEO of Cumulus Global.  Allen co-founded Cumulus Global in 2006 to offer small businesses enterprise-grade email security and compliance using emerging cloud solutions. He has led the company’s growth into a managed cloud service provider with over 1,000 customers throughout North America.

Boost Your Tech Project Team Performance

Your technology projects succeed when your project team performs well as a team and individually. When team members communicate clearly, stay accountable, and focus on what matters, your projects run smoother and achieve better results.

Here’s how to make team participation work.

Define Your Project Team

Remember that your project team is more than your IT staff and vendors.  You project team should include stakeholders – executive sponsors, subject matter experts, and key users/user groups. Your extended project team helps you define success metrics, prioritize requirements, manage and communicate change, and provides testing and feedback.

With a well-defined team, you can manage your project to the metrics that matter. You also have more control of project scope and direction.

Set Clear Roles and Commitments for Team Members

Teamwork starts with clarity. Define roles, responsibilities, expectations, and deadlines from the start. Verify that everyone knows their responsibilities, and accountability and motivation will naturally follow. (This 3T@3 Series recording discussing managing project input and feedback)

Clear commitments reduce confusion and align your team.

Prioritize Tasks

After setting commitments, establish priorities. Technology projects have many moving parts. To manage these effectively, teams should collaborate to identify and rank priorities based on urgency, impact, and dependencies.

By focusing on high-priority work, you ensure that your team completes critical tasks first and that you allocate resources efficiently. Clear priorities also help your team maintain a steady workflow and remain aligned.

Follow Up Consistently

Even the most organized teams need structured follow-ups to maintain momentum. Regular, structured check-ins help you and your team track progress, address roadblocks early, and reinforce accountability. Use follow-up and status meetings to catch missed deadlines and project issues before they get out of hand. You gain flexibility to adjust timelines and resources slightly without compromising the overall project schedule.

Consistent follow-ups help you address issues early, keep your team on track, and reinforce a shared sense of responsibility and accountability.

Handle Disruptions Constructively

Working in a team isn’t always easy. Sometimes team members may be disruptive, overlook mistakes, or push back against collaboration. The key is to address these issues early and respectfully. Take the time to listen, acknowledge what’s going on, and respond promptly. Be transparent when addressing concerns and remember that it’s perfectly fine for your answer to be “no.” When you explain the reasons behind your decisions or changes in direction, it helps everyone stay on the same page. Even if not everyone agrees, they will understand where you’re coming from.

By constructively managing conflicts, you and your team maintain a positive environment that encourages productive contributions from everyone.

How We Help

We provide the structure, communication, and support your team needs to succeed. From defining roles and prioritizing tasks to managing follow-ups and challenges, our professional services help keep your IT systems in sync with your business priorities so projects move forward efficiently.

About the Author

Allen Falcon is the co-founder and CEO of Cumulus Global.  Allen co-founded Cumulus Global in 2006 to offer small businesses enterprise-grade email security and compliance using emerging cloud solutions. He has led the company’s growth into a managed cloud service provider with over 1,000 customers throughout North America.

Cumulus Global Recognized as a 2025 Inc. Power Partner Award Winner

The annual list recognizes the leading B2B companies that have proven track records of supporting entrepreneurs and helping companies grow.

2025 Inc. Power PartnerWestborough, MA, November 5, 2025 – Cumulus Global proudly announces its recognition on the Inc. Power Partner Awards 2025. The prestigious list honors business-to-business (B2B) organizations that have proven track records supporting entrepreneurs and helping startups grow across a range of evaluation criteria. Inc.’s recognition of Cumulus Global spans three categories: Small & Mighty, Technology & Development, and General Excellence.

“We are incredibly proud of our team for earning national recognition for our work with small businesses,” noted Cumulus Global CEO, Allen Falcon. “As a small business ourselves, we appreciate receiving recognition for the value we bring to our small business clients and for the quality of our managed cloud services and solutions.”

Companies on the Inc. Power Partner list received top marks from clients for being instrumental in helping leadership navigate the dynamic world of startups. These B2B partners support entrepreneurs across various facets of the business, including hiring, compliance, infrastructure development, cloud migration, fundraising, and more, allowing founders to focus on their core missions. 

“The entrepreneurial journey and community are core to Inc.’s mission, and it’s a true honor to celebrate this year’s Inc. Power Partners — the companies dedicated to helping small businesses and entrepreneurs,” says Bonny Ghosh, editorial director at Inc. “Whether they’re coordinating complex marketing campaigns or reliably supporting the day-to-day infrastructure of growing companies, these honorees aren’t simply B2B providers — they are true partners in helping businesses grow and succeed.” 

 

While most IT service firms prefer to work exclusively with larger clients, Cumulus Global offers solutions and services that scale for any small or midsize business – including sole practitioners and solopreneurs. The company’s Managed Cloud Services and Security CPRⓇ managed security model and services provide secure and affordable solutions that improve productivity and empower teams to excel.

For more information or to view the complete list of honorees, visit https://www.inc.com/power-partner-awards

About Cumulus Global

Nationally recognized as a leader in managed cloud services and security, Cumulus Global delivers productive, secure, and affordable managed cloud services to small and midsize businesses, governments, and K-12 schools. Translating business objectives into technology needs and priorities, we design, deploy, manage, and support services that help our clients thrive and grow.

About Inc.  

Inc. is the leading media brand and playbook for the entrepreneurs and business leaders shaping our future. Through its journalism, Inc. aims to inform, educate, and elevate the profile of its community: the risk-takers, the innovators, and the ultra-driven go-getters who are creating the future of business. Inc. is published by Mansueto Ventures, along with fellow leading business publication Fast Company. For more information, visit www.inc.com. 

About Cumulus Global

Nationally recognized as a leader, Cumulus Global delivers productive, secure, and affordable managed cloud services to small and midsize businesses, governments, and K-12 schools. Translating business objectives into technology needs and priorities, we design, deploy, manage, and support services that help our clients thrive and grow.

Cumulus Global Awarded Cybersecurity Trademark: Security CPR®

The Security CPR® Model and Services Focus on Cybersecurity Needs of Small and Midsize Businesses

Westborough, MA, October 20, 2025 – Cumulus Global proudly shares that the our Security CPR® model and services received a Trademark (Registration Number 7,966,747) from the United States Patent and Trademark Office. The trademark recognizes our unique expertise and leadership. Security CPR® includes our cybersecurity risk management technical consulting; training and education; and services covering threat analysis, prevention and deterrence, remediation, and governance.

“We are excited and proud that our Security CPR® model and services received this recognition,” stated Cumulus Global CEO Allen Falcon. “Security CPR® defines and delivers cybersecurity solutions that small businesses can rely upon, understand, and afford.”

Most small businesses struggle to meet current cybersecurity demands. Without expertise or the resources of larger organizations, small businesses still need to follow state and federal laws, industry regulations and standards, and contractual obligations. Security CPR® encompasses three core components of an effective cybersecurity program.

  • Communication and Education
  • Prevention and Protection
  • Recovery and Response

“As a model and a set of services, Security CPR® adapts to your specific business needs,” notes Falcon. “We tune your cybersecurity services to match your requirements, risks, business operations, and budget.”

As part of our commitment to helping small businesses protect themselves from cybersecurity threats, we recently launched our Cybersecurity Landing Zone. The zone collates blog posts, web events, eBooks, and other resources to help small business owners navigate the ever-changing cybersecurity landscape.

To assess, plan, and improve your cybersecurity, book a free, no obligation meeting with one of our Cloud Advisors.

About Cumulus Global

Nationally recognized as a leader, Cumulus Global delivers productive, secure, and affordable managed cloud services to small and midsize businesses, governments, and K-12 schools. Translating business objectives into technology needs and priorities, we design, deploy, manage, and support services that help our clients thrive and grow.

A 5-Step Strategy for Responsible AI

5-Step Strategy for Responsible AI

AI is changing how our businesses operate and compete. As we rely more on AI, having strong governance is essential to ensure our AI tools are used securely, ethically, and responsibly. Our use of AI should align with your company’s values and regulatory standards.

By setting clear policies and accountability, you can reduce risks like data breaches, ethical issues, and noncompliance. Strong governance also prevents unauthorized AI use, making sure that every AI activity supports your business goals.

1 Create Comprehensive AI Use Policies

Unauthorized AI use, or Shadow AI, creates serious risks for your business. To manage Shadow AI and other risks, you need visibility, control, and guidance for your team. A well-crafted AI Usage Policy reduces the chance of mistakes or misuse and helps you responsibly manage AI usage.

Your AI usage policies should:

  • Define allowed and unallowed use of AI as a tool/resource
  • Outline principles for ethical and appropriate use
  • Specify security guidelines to ensure data protection and compliance with regulations, industry standards, and contractual obligations

Your policies should also clearly state:

  • How your team should handle your company data
  • How your team should handle and protect third party data
  • Which AI tools are approved
  • When and how team members may use external AI resources

2 Implement and Monitor Controls

Implementing access controls and monitoring systems helps you identify when AI tools are being used outside approved channels.

Create processes for:

  • Your team to request access to AI tools and services
  • Evaluating requested tools for applicable use cases, usability, security, and cost
  • Deploying new AI tools and services, including education and training

Periodically audit your environment to spot unauthorized applications before they create problems. 

Work with your team to move to authorized AI tools that provide the same capabilities or review and select a solution you can secure and support.

3 Ensure Legal and Regulatory Compliance

Compliance is a key aspect of responsible AI use. Your AI practices need to follow data privacy laws, industry regulations, and contractual obligations. 

Begin by identifying and reviewing relevant laws, industry standards, and contractual obligations related to data privacy. Identify any specific conditions or requirements related to the use of AI services.

You want to be able to demonstrate and document your compliance. Review the security compliance certifications and practices of your AI services and tools. Collect the necessary information, including how your AI tools collect, store, and use data. 

Regular audits will help catch potential issues, particularly with Shadow AI. 

Stay current with evolving legislation to ensure that your AI practices remain compliant over time.

4 Prioritize Ethical AI Practices

Ethical AI builds trust and protects your reputation. When you prioritize ethics, you show that your business values integrity and fairness, strengthening relationships with clients and stakeholders.

  • Regularly review your AI models and the data they use to remove bias and ensure transparency in decision-making. In addition to bias detection and mitigation, AI training should include diverse data sources and that results are not skewed by inherent biases.
  • Make sure your AI is fair, explainable, and accountable, so your team and clients can trust its outcomes. AI tools should articulate results and decisions in human-understandable terms. People need to be able to understand the rationale behind the AI results.
  • Ensure you have human judgement and intervention at every stage of your AI journey. Clear lines of responsibility provide accountability. Human review prevents over-use of AI, particularly in decision-making. Encourage feedback from employees, clients, and other stakeholders.

5 Train and Support Your Team

Your AI strategy will only succeed if your team knows how to use AI safely and effectively. When your team is confident in using AI, you maximize its benefits while minimizing risks.

Provide training and support that covers technical skills, applicability to relevant use cases, and ethical considerations. 

Support strategies include:

  • Offering training sessions and user guides.
  • Providing a dedicated support team for questions.
  • Offering ongoing learning opportunities as AI evolves.

How We Help

Using AI securely and ethically requires careful planning and ongoing effort. Our Cloud Advisors can help you identify use cases, select tools and services, endure data security and government, and help your team get the most from your AI investments.

About the Author

Bill Seybolt bio pictureBill is a Senior Cloud Advisor responsible for helping small and midsize organizations with cloud forward solutions that meet their business needs, priorities, and budgets. Bill works with executives, leaders, and team members to understand workflows, identify strategic goals and tactical requirements, and design solutions and implementation phases. Having helped over 200 organizations successfully adopt cloud solutions, his expertise and working style ensure a comfortable experience effective change management.

{URGENT}: Windows 10 Support ENDS on Oct. 14th. Extended Security Updates Available

Windows 11

ACT NOW!  Support for Windows 10 officially ends on October 14, 2025. After this date, Microsoft will no longer provide software updates and technical assistance. If you are not upgrading to Windows 11, you must purchase Windows 10 Extended Security Updates to continue receiving critical and important security updates.

Without these extended security updates, continuing to use Windows 10 dramatically increases your exposure to significant risks. Your systems become prime targets for cyberattacks, ransomware, and data breaches. You risk costly downtime, loss of sensitive information, and severe compliance issues. 

Proactive planning and action are not just recommended, they are critical for your business continuity and security.

Know Your Windows 10 Options

We agree with Microsoft’s recommendation to upgrade all eligible systems to Windows 11. We also understand you may have budget constraints or compatibility issues with older software.

You can check if your PCs will run Windows 11 using Microsoft’s PC Health Check app. If your PC will not run Windows 11, you have options other than buying new devices.

Windows 10 Extended Security Updates (ESU): 

Microsoft has release pricing for ESU licenses.  The license are available as a one-time purchase for each year. You do not need to commit to multiple years up-front, you can purchase the licenses annually if needed.  The pricing is as follows:

  • Year 1 – from October 2025 to October 2026 – $61 each
  • Year 2 – from October 2026 to October 2027 – $122 each
  • Year 3 – from October 2027 to October 2028 – $244 each

Important Notes:

  • Not all systems are eligible to install the updates. To be eligible to install updates from the ESU program, devices must be running Windows 10, version 22H2. For more information on prerequisites and enabling ESU in commercial environments, see Enable Extended Security Updates (ESU).
  • ESU Program updates do NOT include: New features; Customer-requested non-security updates; Design change requests; or General support.
  • The Windows 10 ESU only includes support for the license activation, installation, and possible regressions of the ESU itself for organizations with a support plan in place.

Keep in mind, the Windows 10 Extended Security Update program serves as a temporary bridge and does not address underlying hardware or software compatibility issues related to upgrading to Windows 11.

Virtual Desktop Services: 
  • Using virtual desktop services, such as Azure Virtual Desktop, allow you to use your existing PCs to access a robust and secure Windows 11 environment. Virtual desktops work well for hybrid team members and to mitigate the cost of upgrading multiple devices.
  • Connect with one of our Cloud Advisors to explore this option.

Windows 11 Upgrade HelpPlan for Your Windows 11 Transition

Regardless of the strategy you choose, proactive planning is crucial for a smooth and secure transition. Follow these steps to ensure you’re ready:

Assess Your Current IT Environment
  • Use Microsoft’s PC Health Check app to determine which devices can run Windows 11, which can be upgraded, and which require replacement. If you use Windows 10 in embedded systems, check with your vendor.
  • Confirm which of your business-critical applications and tools are compatible with Windows 11. Identify necessary software upgrades or migrations.
Prepare Your Budget
  • Accurately map the cost of upgrading and/or replacing devices. Keep in mind that older systems, even if upgraded now, may soon require replacement.
  • Identify any software upgrade costs.
  • Keep in mind any fees for tech support or professional services. You may need or want help transferring applications and data to new devices or setting up virtual desktops.
Develop Your Transition Plan & Data Strategy
  • Plan your timing and procedures for upgrades, purchases, and migrations. Focus on preventing data loss during migration and consider staging your rollout in phases to minimize disruption.
  • Crucially, ensure all critical data is securely backed up before upgrading or migrating systems. 
  • Remember to allow time to test critical software on Windows 11 before upgrading.
Train Your Team
  • Provide resources and help your team become familiar with the Windows 11 interface and new features.
  • If you are upgrading your business software for compatibility, you may want to provide additional training on new functionalities and capabilities.
  • Stay Informed: Monitor Microsoft’s official updates and announcements. Keep current with regarding Windows 10 end of life and Windows 11 developments.

Cumulus Global Will Help

Plan and Act Now.  As with any major upgrade, we expect demand for PCs, laptops, and technical services will increase as the deadline nears. Waiting may result in delays and missed deadlines. Losing Windows 10 support can result in costly business disruptions.

For assistance, schedule a brief, free call with one of our Cloud Advisors to discuss your assessment, plan, and upgrade needs, priorities, and budget.

About the Author

Allen Falcon is the co-founder and CEO of Cumulus Global.  Allen co-founded Cumulus Global in 2006 to offer small businesses enterprise-grade email security and compliance using emerging cloud solutions. He has led the company’s growth into a managed cloud service provider with over 1,000 customers throughout North America.

Avoid MFA Pitfalls and Lockouts

MFA PitfallsMaybe you have seen the meme about spending 6 hours per day entering multi-factor authentication (MFA) codes. While inconvenience is one pitfall of MFA, improper configuration and management of MFA can lead to more damaging pitfalls and lockouts. Your ability to work can take days to recover.

The MFA Pitfalls 

Most of us are not using a separate security key; we authenticate using our smartphones. Whether by Authenticator app, SMS text, one-time passwords/codes, or local app login, we need our smartphone to access our apps and services.

Imagine this scenario:

  • Your iPhone is lost, stolen, or damaged.
  • On your laptop, you need to login to check email and the authentication goes to the Authenticator app on your phone.
  • You could opt to have a one-time password emailed to you, but you cannot access your email.
  • You could send it to your recovery email, which you rarely use, is logged out and the MFA also goes to your phone.

You get the picture. You are stuck, but you still have other means of access. Depending on your configuration, restoring access may be complex and take too much time.

And while this scenario may seem unlikely to happen, we see online forums where over 80% of help requests relate to account lockout and recovery. Almost all of the problems were avoidable with proper configuration and management.

Tips to Avoid MFA Pitfalls

To help you avoid MFA pitfalls and lockouts, we created a list of things to consider when configuring management of your MFA services.

  • Use a Sustainable Phone Number for MFA and for Recovery: MFA texts and messages should only go to a phone number that can remain in use if you switch phones or phone systems. Whether to a physical phone or a VoIP service, make sure that you will not lose your number if things change in the future.
  • Have a Separate Recovery Phone Number: If your phone is not available for MFA calls or texts, it is not going to work for recovery codes, calls, or texts. If at all possible, use different phone numbers for MFA and recovery. If your MFA phone number is your smartphone, your recovery phone number could be your business’ VoIP phone number, or the number of a trusted coworker or spouse.
  • Use a Separate Recovery Email: If the email account that receives MFA messages is inaccessible, you will not be able to use it for recovery. Use an alternate email address. This could be a personal (@gmail.com) account or a one belonging to somebody you trust. When setting up your recovery email account, make sure that account is not reliant on the same methods and devices.
  • Stop Before You Drop: Before you give up, abandon, or change a phone number or email address, review the MFA setup across all of your apps and systems. Make sure you move them to your new number and/or email address before you give up the old ones.
  • Backup Your Authenticator Apps: Both Microsoft Authenticator and Google Authenticator let you backup your Authenticator App data. This lets you reinstall and recover your Authenticator settings and accounts on a new or different device. Make sure, however, that the backup location does not require the Authenticator App for access.
  • Create, Print, and Save Recovery Codes: Many systems, apps, and security tools let you create emergency recovery codes. If available, create the codes, print them, and keep them in a safe location (“Put it with your Passport”). Having these codes can reduce account recovery time by hours or days.
  • Use a Password Manager: Password managers provide a single, secure login to allow access to complex passwords and validation for the connected apps. Using a password manager reduces the risk of account lockout.
  • Do Not Buy Direct: Buy your cloud apps and services through authorized partners. For most SaaS and cloud solutions, your partner has administrative access to your account. They can reset passwords and recover accounts. If needed to expedite access or recovery, your partner can change MFA configuration and/or temporarily remove MFA from an account.

These steps require some planning. As MFA settings and preference can often be set individually, you will need to communicate and coordinate with your employees. 

We Will Help

Our Cloud Advisors are here to assist. We can:

  • Review your current MFA services and configurations
  • Identify risks and recommend changes
  • Assist your team members with settings and recovery codes
  • Provide your with Password Manager services
  • Provide license and account co-management for your cloud services

Schedule time with one of our Cloud Advisors now to discuss your next steps.

About the Author

Allen Falcon is the co-founder and CEO of Cumulus Global.  Allen co-founded Cumulus Global in 2006 to offer small businesses enterprise-grade email security and compliance using emerging cloud solutions. He has led the company’s growth into a managed cloud service provider with over 1,000 customers throughout North America.

Don’t Fall for the Call

Don't Fall for the Call

IT support scams are back and on the rise. Over the past few weeks, the reports of vendor phone calls and emails claiming to contact people about suspicious activity in their accounts have skyrocketed.  

Do Not Fall for the Scam

Google, and Microsoft, will NEVER call your or email you to start a service or support call.  Let me repeat that, but this time in bold. Google, and Microsoft, will NEVER call your or email you to start a service or support call.

Some of these calls and emails attempt to get you to enter your username and password into a fake web page. 

Many of these attacks request the multi-factor authentication (MFA) code. The attackers initiate a password reset. If given the MFA code, they access the account and can change credentials, access other services, and exfiltrate information.

It is more difficult to spot fake landing and sign in pages

While historically easy to spot, attackers use generative AI to create sophisticated fake login pages. 

Attackers are also using legitimate landing page, marketing, or document tools. The link in the email may open a validly hosted page or document with instructions and another link that, in turn, takes you to the fake login page. 

As the hackers take you through a legitimate service, as a pass-through, you may be less likely to notice that the page asking for your credentials is fake. This method is also more difficult to combat since the pass-through may require valid credentials for access.

Steps You Can Take

You can take a few simple steps to prevent these types of attacks from successfully damaging your business.

  • Education – Inform and educate your team about current and emerging cyber attack methods, what to look for, and how to handle suspicious activity.  Cyber Awareness Training, if well managed, is an affordable means to keep security top of mind.
  • Advanced Email Threat Protection – Email threat protection focused on sender domains, links, and attachments is not enough. Attackers use masking, images, and QR codes beyond the capabilities of many email protection services. Upgrading to a more robust service will provide better protections. Solutions that provide banners and “one-click response” better empower users to flag and manage suspect messages.

We Will Help

Our Cloud Advisors are here to assist. We will:

  • Assess your current security profile and protections
  • Prioritize options and recommendations for security improvements
  • Help you plan and budget for any changes
  • Deploy and co-manage your security solutions to keep you protected.

Schedule time with one of our Cloud Advisors now to begin your security review and improvements.

About the Author

Bill Seybolt bio pictureBill is a Senior Cloud Advisor responsible for helping small and midsize organizations with cloud forward solutions that meet their business needs, priorities, and budgets. Bill works with executives, leaders, and team members to understand workflows, identify strategic goals and tactical requirements, and design solutions and implementation phases. Having helped over 200 organizations successfully adopt cloud solutions, his expertise and working style ensure a comfortable experience effective change management.

library

IT Budget Workbook Template

eBook | Source: Cumulus Global — Most small businesses do not create an IT budget. Instead, we renew services when they come due and make new spending decisions as the needs or opportunities arise. Without an IT Budget, every spending decision is out of budget and an exception to our spending and fiscal expectations. This eBook shares a simple 5 step process for planning your IT spending.

Smart IT Budgeting Pays Off

eBook | Source: Cumulus Global — Most small businesses do not create an IT budget. Instead, we renew services when they come due and make new spending decisions as the needs or opportunities arise. Without an IT Budget, every spending decision is out of budget and an exception to our spending and fiscal expectations. This eBook shares a simple 5 step process for planning your IT spending.

Make IT Decisions Like a Pro – 7 Best Practices

eBook | Source: Cumulus Global — IT decision-making often feels overwhelming. With countless new products, services, and a seemingly endless stream of information, it’s easy to hesitate, overanalyze, and doubt your decisions. You want (and need) IT services to drive growth, improve efficiency, and position your organization for long-term success.

Unleash the Power of NotebookLM

eBook | Source: Google– NotebookLM is an AI-powered research assistant who reads and understands your private data. This Google eBook walks you through how NotebookLM can empower your teams to work smarter, not harder.

2025 CrowdStrike Global Threat Report

Whitepaper | Source: CrowdStrike — This report is a deep dive into cyber threat data an analyses for 2024. The report identifies emerging risks and overall trends to consider when evaluating and planning your cybersecurity posture, systems and services, and budget.

Decision Tree: Windows 10 End of Life

eBook | Source: Cumulus Global — Windows 10 End of Life is October 14, 2025. Proactive planning and action are not just recommended, they are critical for your business continuity and security. This eBook provides a decision tree and walks you through your Windows 10 upgrade options.

Cybersecurity Essentials for Smaller Businesses

eBook | Source: Cumulus Global — Cybercriminals target small businesses because we tend to have fewer resources and less robust cybersecurity practices. This eBook provides a strategy, model, & roadmap of affordable, effective cybersecurity essentials for sole practitioners, solopreneurs, & very small businesses.

Gen AI Prompt Engineering

Whitepaper | Source: Google — You don’t need to be a data scientist or a machine learning engineer – everyone can write effective gen AI prompts. This 60+ whitepaper goes beyond “prompting 101” and dives deep into advanced prompt engineering with Gemini AI and for large language models (LMMs) in general.

Google Workspace: A Guide for Using AI at Work

eBook | Source: Google — With Google Workspace, powerful AI is included – not bolted on. Gemini AI is the AI that makes everyday work easier. This eBook provides an app by app overview of ways to use AI in Google Workspace

Verizon 2024 Data Breach Investigations Report

Whitepaper | Source: Verizon — The Verizon 2024 Data Breach Investigations Report, the 17th annual edition, highlights evolving threat scenarios world-wide. From year to year, we see new and innovative attacks as well as variations on tried and-true attacks. The past year has been a busy one for cybercrime.

Webcasts

IT Strategy & Planning: Where You Want IT to Be in 2026

(12/16/25) – With significant changes to our productivity tools, the Artificial Intelligence explosion, and increasing expectations for security and compliance, how are your IT strategy and planning adapting for the coming year? Let productivity, security, and affordability drive your IT strategy and plans for 2026.

How To: Better AI Results

(11/18/25) – If what you put into AI is not clear, what you get out will lack clarity. If your use case – your “why” for using AI – is not clear, you will not get the outcomes you want. AI is most effective when you define meaningful use cases and use well-designed prompts.

Don’t Do IT Alone

(10/21/25) – Sole practitioners and solopreneurs make up about 80% of all small businesses. At the same time, fewer than 10% of IT service providers want sole practitioners, solopreneurs, and other very small businesses as clients. Picking the right suite of IT solutions, and finding the right IT service provider is essential for your productivity, security, and budget.

Is Your AI OK?

(09/15/25) – AI is here. Your business is using AI – officially or not. And with AI comes “AI Data Leaks.” AI has the power to do good and to do damage. Managing your AI services, and security, is the best way to ensure your AI is OK.

Make IT Decisions with Confidence

(08/19/25) – As small business owners and leaders, we struggle to make IT decisions. We may trust our advisors, our sources of information and guidance, but is that enough? In order to make IT decisions with confidence, we need to trust ourselves. If not, we struggle with analysis paralysis amid overwhelming information and options.

Better IT for SMBs

(06/17/25) – Most IT firms serving small and midsize businesses target companies with more than 20 employees. As a smaller business, your IT needs differ. You want and deserve secure, productive, and affordable IT. This 3T@3 Series event recording dives into how sole practitioners and very small businesses can and should get the productive, secure, and affordable IT solutions and services you need.

Secure Your Data for Gemini AI

(05/20/25) – Take steps to ensure that Gemini and other AI tools will not expose sensitive information internally or externally. In this 3T@3 Series online event, Cumulus Global CEO Allen Falcon is joined by Paul Lees, CEO of Bespin labs to discuss the importance of data governance and security with gen AI in Google Workspace.

Pick the Right Service Plan

(04/15/25) – Management, administration, training, and support determine how much value you get from your IT services and systems. In this live 3T@3 Series online event, Cumulus Global CEO Allen Falcon discusses how to select the right service plan and managed cloud services for your business.

Managed Cloud Services Update

(03/18/25) – Cumulus Global is updating our Managed Cloud Services to expand protections against cyber attacks. Cybersecurity Enhancements Add Value to your Managed Cloud Services. Changes to our traditional Service Plans give you even more options.

Data Loss Prevention (DLP) for SMBs

(02/18/25) – If your business must comply with government or industry regulations covering disclosure of protected information, Data Loss Prevention (DLP) can be complex and expensive. This session coves affordable, effective DLP solutions for small and midsize businesses, like yours.