Patch management for small businesses: a routine that holds
Patching rarely fails for lack of tools. It fails when nobody owns it. A monthly update routine, an emergency lane and proof that the patches landed.
Read field noteKnowledge
Knowledge from the field
Original guidance on cybersecurity, networks, infrastructure, Cloudflare, Palo Alto, Cisco and practical AI.
Topics
All field notes
Browse practical security and infrastructure guidance
Business email compromise: stopping payment fraud
Business email compromise turns a trusted email thread into a payment to the wrong account. The Microsoft 365 settings and payment checks that stop it.
Read field note
Intune rollout: what to decide before you enrol devices
Before enrolling devices in Intune, settle ownership, app protection, Autopilot and compliance rules. A rollout plan for Canadian small businesses.
Read field note
Azure migration: what to settle before moving servers
Before moving servers to Azure, map dependencies, settle identity, network and data residency, and agree rollback. A readiness checklist for Canadian SMBs.
Read field note
Microsoft 365 backup: what native recovery will and won't restore
Microsoft 365 recycle bins and retention are not a backup. What native recovery covers, where it stops, and how to plan restores you can rely on.
Read field note
Teams Phone migration: what to settle before you port your numbers
Moving office calling into Microsoft Teams? The four decisions to settle first: carrier model, network, emergency calling and number porting.
Read field note
Emergency access accounts: the control that stops MFA from locking you out
Identity hardening adds dependencies as well as protection. How to configure emergency access accounts so a policy or a lost factor cannot lock you out.
Read field note
Cybersecurity Assessment Scope: A Buyer’s Evidence Checklist
Define the decisions, service boundaries, evidence, testing depth and deliverables that turn a cybersecurity assessment into an actionable plan.
Read field note
Third-party remote access: control the whole connection lifecycle
Turn vendor and support access into an owned lifecycle with named identities, narrow paths, visible sessions, expiry and a tested shutdown method.
Read field note
Security logging coverage and retention: design for the investigation
Build a logging plan from investigation questions, evidence paths and response ownership instead of collecting high-volume data without a use case.
Read field note
Privileged access without losing the recovery path
Reduce standing administrative access while preserving tested, monitored emergency access for identity failures and major incidents.
Read field note
Ransomware Recovery Readiness: A Checklist You Can Prove
A practical checklist for proving ransomware recovery works: what to test, what evidence to keep, and which assumptions usually fail under pressure.
Read field note
Proxmox Backup and Recovery: Design for a Restore, Not a Green Job
Design Proxmox backups around a proven restore rather than a green job: retention, isolation, verification and the failure modes that matter.
Read field note
Secure AI-Agent Access to Infrastructure: Put Authorization Outside the Model
How to give AI agents infrastructure access without losing control: scoped credentials, approval paths, audit trails and reversible change.
Read field note
DNS Migration With a Rollback Plan That Can Actually Work
A DNS provider migration runbook covering zone discovery, TTLs, DNSSEC, delegation, split authority, validation and the time-dependent realities of rollback.
Read field note
Network Segmentation for SMBs: A Minimum-Viable Architecture That Can Grow
A staged segmentation design for small and midsized businesses that contains compromise without creating an unmanageable firewall-rule maze.
Read field note
Deploying Cloudflare WAF Without Breaking Production
Deploy Cloudflare WAF without breaking production: staged rollout, rule tuning, false-positive handling and a rollback you have actually tested.
Read field note
Seven Zero Trust Implementation Mistakes—and How to Correct Them
Seven zero trust mistakes that stall real deployments, why each one happens, and the correction that keeps the program moving.
Read field note
Deploy SPF, DKIM, DMARC, MTA-STS, and BIMI Without Breaking Mail
Roll out SPF, DKIM, DMARC, MTA-STS and BIMI in an order that will not break mail, with the checks to run before each enforcement step.
Read field note
Microsoft 365 Email Authentication: A Controlled SPF, DKIM, and DMARC Rollout
Configure SPF, DKIM and DMARC correctly in Microsoft 365, including the alignment details that quietly cause legitimate mail to fail.
Read field note
Firewall Rule Review: A Checklist That Produces Defensible Change
A firewall rule review that produces defensible change: what to collect, how to judge a rule, and how to retire one without an outage.
Read field note
Firewall change planning with a tested rollback
A practical change-window method that separates validation, implementation, verification, and rollback before production traffic is at risk.
Read field note
A safer starting point for AI agents in infrastructure operations
Start with read-only evidence collection, narrow tool permissions, and reviewable change proposals before an agent can alter production.
Read field note
Cloudflare DNS migration without losing the rollback path
Inventory records, lower risk before delegation changes, validate critical services, and preserve a clear route back.
Read field note
Palo Alto policy review: find risk before adding another rule
Review rule order, application visibility, profiles, logging, and stale access before expanding a PAN-OS policy base.
Read field note
Cisco access control readiness before enforcing 802.1X
Prepare identity, certificates, profiling, fallback, and support workflows before moving wired access from visibility to enforcement.
Read field note
Recovery evidence: prove the service can come back
Backups matter, but recovery confidence comes from tested dependencies, timed restores, and evidence that the service works after restoration.
Read field noteFree initial consultation
Contact HAI ConsultingNeed a second set of eyes on a security or infrastructure decision?
Describe the environment, the risk and the outcome you need. The first conversation is a free initial consultation, with no obligation to go further.