KNOWLEDGE
Practical IT knowledge: answers for companies in Bamberg.
Short, clear guides to the questions companies really ask before an IT decision.
TOPIC
IT security and emergency preparedness
Practical IT security knowledge for small and medium-sized companies: measures, backup, emergency plans, phishing, multi-factor authentication and legal requirements such as NIS2. Explained clearly, with concrete next steps. All articles on this topic →
IT security for small businesses: 10 measures
Small businesses get attacked too, usually in untargeted, automated ways. Ten basic measures lower the risk noticeably without needing a security team of your own.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSBackup strategy: the 3-2-1 rule explained
A backup that cannot be restored is not a backup. The 3-2-1 rule describes how many copies you need, where they should live and how to survive ransomware.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSRansomware attack: what companies should do first
When files are encrypted and a ransom note appears on screen, the first hour counts. This sequence helps limit damage and avoid mistakes.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSNIS2: does the directive apply to my company?
Germany's NIS2 implementation law has been in force since 6 December 2025. Many mid-sized companies are affected without knowing it. Here is how to check whether you are and what to do.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSSpotting phishing: training your staff the right way
Most attacks begin with an email. Employees who recognise phishing and report it without hesitation are one of the most effective protections.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSIntroducing multi-factor authentication (MFA)
A stolen password alone is then no longer enough. MFA is one of the most effective and cheapest security measures. Here is how to introduce it without overwhelming your team.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSServer hardening: basics for Windows and Linux
Hardening reduces the attack surface of a server: fewer services, fewer privileges, secure settings. These basics apply to Windows Server and Linux alike.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSPatch management: secure, predictable updates
Unpatched vulnerabilities are among the most common entry points. A clear patch process ensures updates are installed promptly, tested and without surprises.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSGDPR and IT: technical and organisational measures
Article 32 GDPR requires "appropriate" technical and organisational measures (TOMs). What that means in IT in practice and how to document it traceably.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSPassword policy: length beats complexity
Forced changes every 90 days and cryptic special characters do not make passwords safer. Current recommendations rely on length, uniqueness and MFA.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSSecuring email: SPF, DKIM and DMARC explained
With three DNS records you protect your domain against spoofing and improve email deliverability. Here is how SPF, DKIM and DMARC work.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSBusiness firewalls: basics and rules
The firewall is your network's border control. With clear rules, segmentation and maintenance it offers solid protection even without specialist knowledge.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSCyber insurance: which IT requirements apply
Insurers now ask in detail about your IT security. Those who can evidence MFA, backups and an emergency plan have better chances of cover.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSVulnerability scan or pentest: what is the difference?
A scan finds known vulnerabilities automatically, a penetration test checks whether attackers can actually exploit them. Both have their place.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSHome office and remote work: IT security checklist
Working from home means leaving the protected company network. This checklist shows what companies and employees should consider.
Read article → IT SECURITY AND EMERGENCY PREPAREDNESSISO 27001: getting started for mid-sized companies
ISO 27001 describes how an information security management system (ISMS) is built. What lies behind it and what a realistic start looks like.
Read article →TOPIC
Identity, Active Directory and access
Everything about user management and access control: Active Directory, Entra ID, single sign-on, privileged accounts, password management, zero trust and permission concepts for companies. All articles on this topic →
What does an Active Directory audit cost?
There is no fixed number because the effort depends on the size and history of your environment. If you know the cost drivers, though, you can compare quotes well and control the scope.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSActive Directory or Entra ID: which fits you?
Classic Active Directory and Microsoft Entra ID solve related but not identical tasks. This comparison helps decide between on-premises, cloud and hybrid.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSSecuring Active Directory: the key steps
Active Directory is the heart of many networks and a prime target for attackers. A few targeted steps reduce the risk substantially.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSSingle sign-on (SSO): benefits and rollout
One sign-in for all applications: single sign-on saves time, reduces password chaos and makes access centrally controllable. Here is how to introduce SSO sensibly.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSPrivileged Access Management (PAM) explained
Administrator rights are an attacker's most valuable asset. PAM ensures they exist only when and only as long as they are needed.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSIntroducing a password manager in your company
Passwords on notes, in spreadsheets or by email are a common entry point. A team password manager solves this and makes access shareable and traceable.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSZero Trust explained: principles and getting started
Zero Trust means: do not trust any device or user simply because of its location in the network. The model fits work in the office, at home and in the cloud.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSCreating a permission concept: roles instead of single rights
Who may do what? A role and permission concept answers this in a traceable way and prevents sprawling rights that accumulate over years.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSJoiner, mover, leaver: the JML process
When employees join, change department or leave, accounts and rights must follow. A clear process prevents forgotten access.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSGroup policy (GPO): basics and best practices
With group policy you control settings on all Windows devices centrally. What to observe so the environment stays manageable.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSSecuring Microsoft 365: the most important settings
Microsoft 365 is far from optimally secured after setup. A few basic settings close the most common gaps.
Read article → IDENTITY, ACTIVE DIRECTORY AND ACCESSManaging service accounts securely
Service accounts run in the background, often with high rights and old passwords. That is exactly why they are a preferred target.
Read article →TOPIC
Endpoints and the Microsoft environment
Managing clients securely and consistently: Intune, Configuration Manager (SCCM), Windows Autopilot, the end of Windows 10 support, Windows 11 and Linux Mint in the office. All articles on this topic →
Windows Autopilot: new devices without manual work
With Windows Autopilot, new laptops configure themselves at first start: sign in, wait, work. This saves time on rollouts and device replacements.
Read article → ENDPOINTS AND THE MICROSOFT ENVIRONMENTIntune or SCCM: comparing device management
Both tools manage Windows devices but with different philosophies. The comparison shows when cloud, when classic and when both together make sense.
Read article → ENDPOINTS AND THE MICROSOFT ENVIRONMENTWindows 10 end of support: what companies should do
Since 14 October 2025, Microsoft no longer provides regular security updates for Windows 10. For companies this means: plan the move or bridge it in a controlled way.
Read article → ENDPOINTS AND THE MICROSOFT ENVIRONMENTLinux Mint in the office: an alternative to Windows?
For many office workplaces a browser, email, office suite and file storage are enough. There Linux Mint can be a stable, inexpensive and long-lived alternative, including for older devices.
Read article → ENDPOINTS AND THE MICROSOFT ENVIRONMENTBitLocker in business: encrypting drives
If a laptop is lost, encryption protects the data. BitLocker is built into Windows and can be controlled centrally.
Read article → ENDPOINTS AND THE MICROSOFT ENVIRONMENTManaging smartphones and tablets: MDM explained
Company email on the phone is convenient but risky. Mobile device management (MDM) secures devices, separates private from business data and allows remote wipe.
Read article → ENDPOINTS AND THE MICROSOFT ENVIRONMENTBYOD: regulating private devices in the company sensibly
Bring your own device saves costs but brings risks. With clear rules and suitable technology both can be balanced.
Read article →TOPIC
Cloud, networking and collaboration
Infrastructure that grows with you: Nextcloud, video conferencing with Jitsi and BigBlueButton, VPN and mesh VPN with NetBird, Ubiquiti UniFi, Proxmox virtualisation and hybrid cloud decisions. All articles on this topic →
Nextcloud or Microsoft 365? How to decide
Both platforms cover file storage, calendars, contacts and collaboration. The difference lies less in individual features than in who runs the platform, where the data lives and how closely it is tied to the rest of your IT.
Read article → CLOUD, NETWORKING AND COLLABORATIONIntroducing Nextcloud in your company: a guide
Nextcloud offers file storage, calendar, contacts and collaboration on your own infrastructure. This guide shows what matters in planning and introduction.
Read article → CLOUD, NETWORKING AND COLLABORATIONJitsi or BigBlueButton: running video conferencing yourself
Both are open source and can be run in Germany. Jitsi shines for quick meetings, BigBlueButton for seminars and teaching.
Read article → CLOUD, NETWORKING AND COLLABORATIONVPN or mesh VPN: comparing secure remote access
Classic VPNs connect branches and home offices to the company network. Mesh VPNs like NetBird connect devices directly and grant access more granularly. When does which fit?
Read article → CLOUD, NETWORKING AND COLLABORATIONPlanning a UniFi network: Wi-Fi, switches, firewall
With Ubiquiti UniFi, routers, switches and access points can be managed centrally. Good planning determines coverage, speed and security.
Read article → CLOUD, NETWORKING AND COLLABORATIONProxmox as a VMware alternative: when switching makes sense
Since Broadcom acquired VMware, many companies look for alternatives. Proxmox VE is an open-source virtualisation platform that is an option for many mid-sized environments.
Read article → CLOUD, NETWORKING AND COLLABORATIONIT documentation: what companies should record
Whoever does not know what they have cannot protect or repair it. Lean IT documentation saves hours in an incident.
Read article → CLOUD, NETWORKING AND COLLABORATIONIT monitoring: spotting outages before users report them
Monitoring shows whether servers, network and services work and warns of problems. This turns outages into plannable tasks.
Read article → CLOUD, NETWORKING AND COLLABORATIONHybrid cloud explained: benefits and limits
Hybrid cloud combines your own infrastructure with cloud services. For many companies it is the pragmatic path because not everything has to move to the cloud.
Read article → CLOUD, NETWORKING AND COLLABORATIONOpen source in business: opportunities and limits
Open-source software can reduce costs, dependence and data protection risks. But it demands know-how and maintenance. When it pays off.
Read article →TOPIC
Projects, labs and IT professionals
Securing technology decisions and finding the right people: proof of concept, evaluation matrix for tools, hiring IT freelancers, avoiding false self-employment and finding projects as a freelancer. All articles on this topic →
Proof of concept: when a trial run pays off
A proof of concept (PoC) checks on a small, protected scale whether a solution really works in your environment before you commit. It replaces assumptions with experience.
Read article → PROJECTS, LABS AND IT PROFESSIONALSHiring IT freelancers: what companies should watch
External IT specialists bring knowledge and capacity when you need it. Planning cleanly and regulating clearly by contract avoids disputes and legal risks.
Read article → PROJECTS, LABS AND IT PROFESSIONALSFinding projects as an IT freelancer: routes and tips
Project platforms, brokers, network and direct outreach: there are several routes to new assignments. Which suit your profile depends on specialisation and experience.
Read article → PROJECTS, LABS AND IT PROFESSIONALSChoosing software: an evaluation matrix for IT tools
When several solutions are candidates, a structured evaluation helps. A matrix makes the decision traceable instead of gut feeling.
Read article → PROJECTS, LABS AND IT PROFESSIONALSChoosing an IT service provider: checklist for companies
A good IT partner knows your environment, communicates clearly and delivers traceably. These criteria help with selection.
Read article → PROJECTS, LABS AND IT PROFESSIONALSPlanning IT projects: risks and success factors
Many IT projects fail not because of technology but because of unclear goals, missing alignment and underestimated dependencies.
Read article →TOPIC
AI in business
Artificial intelligence in small and medium companies: strategy, local AI with Ollama, cloud services such as OpenAI, Claude and Gemini compared, data protection, AI policy, shadow AI, RAG and the EU AI Act. All articles on this topic →
Introducing AI in your company: a strategy for SMEs
AI pays off where it takes over concrete work. A small strategy with use cases, rules and a pilot prevents expensive false starts.
Read article → AI IN BUSINESSRunning local AI with Ollama in your company
With Ollama, language models run on your own hardware or rented GPU servers. Requests and documents stay inside your environment.
Read article → AI IN BUSINESSHardware for local AI: your own server or Hetzner GPU
Own hardware, new purchase or rented GPU server: which route to local AI fits depends on usage, budget and need for control.
Read article → AI IN BUSINESSOllama, OpenAI, Claude or Gemini: which fits you?
Local models or cloud services? A vendor-neutral comparison by criteria that matter for companies.
Read article → AI IN BUSINESSData protection with AI in business: check points
Before an AI service is used in a company, some questions should be answered. A checklist on data, contracts and access.
Read article → AI IN BUSINESSAI policy for employees: contents and outline
A short AI policy gives employees certainty: what is allowed, what is not, and who is the contact person?
Read article → AI IN BUSINESSShadow AI: when employees use AI unnoticed
Employees often use AI privately at work. That is understandable but carries risks for data. Here is how to handle it.
Read article → AI IN BUSINESSRAG: searching and querying your own documents with AI
With retrieval-augmented generation, an AI answers questions based on your own documents instead of general knowledge alone.
Read article → AI IN BUSINESSEU AI Act: an overview for small and medium companies
The EU AI Regulation applies in stages. An overview of what it means for companies that use AI and what to check now.
Read article →Next step
Have a specific question?
Send us a short description of your situation. We will assess it and tell you openly whether and how we can help.
Request a conversation