Choosing an IT provider is not a decision most business owners enjoy making. Technology can feel opaque, the options are hard to compare, and it is difficult to know what good looks like until something goes wrong.

But getting this decision right matters. The right IT partner makes your business more productive, more secure, and less stressed about technology. The wrong one leaves you dealing with slow response times, recurring problems, and a relationship that feels more like a transaction than a partnership.

This post gives you a practical guide to finding a managed IT provider in the South Island that is genuinely right for your business, including the questions you should be asking before you sign anything.

Start with what you actually need

Before you talk to anyone, it is worth being honest about where your business is right now and where you are trying to go.

How many people do you have, and what does their day-to-day technology use look like? Do you have staff working remotely or across multiple sites? Are you handling sensitive client data? Have you had IT problems in the past that cost you time or money? Do you have any compliance requirements relevant to your industry?

The clearer you are on your own situation, the easier it is to have a productive conversation with a potential provider. And the easier it is to spot when someone is proposing something that does not actually fit your needs.

What to look for in a managed IT provider

Not all managed IT providers are the same. Here are the things that genuinely matter.

Local knowledge and presence. There is real value in working with a provider who is based in your region. They understand the local business environment, they can be on-site when you need them, and they are invested in the community you operate in. For South Island businesses, a Christchurch or wider Canterbury-based provider is worth prioritising over a national company that treats your account as one of hundreds.

Proactive approach. Ask any provider how they identify and deal with problems. If the answer is essentially that they wait for you to report something, that is a red flag. A proper managed IT provider is monitoring your systems continuously and catching issues before they become your problem.

Clear response time commitments. What happens when something goes wrong? How quickly will someone respond, and how quickly will the issue be resolved? These commitments should be written down, not just spoken. A service level agreement that spells out response times gives you something to hold your provider to.

Cyber security capability. In 2024, cyber security is not optional. Any managed IT provider worth working with should have a strong position on security, including endpoint protection, email filtering, user awareness, and incident response. If a provider treats security as an add-on rather than a core part of what they do, look elsewhere.

People who actually listen. This one is harder to measure but easy to notice. Does the person you are talking to ask questions about your business and your people, or do they jump straight to talking about their products and services? The best IT relationships are built on understanding, not just technical competence.

Questions to ask before you sign a contract

Walking into a provider conversation with good questions puts you in a much stronger position. Here are some worth asking.

What does your monitoring look like, and what happens when you detect a problem? You want to understand how proactive they actually are, not just how they describe themselves.

How do my staff contact you when they need help, and what are your response time guarantees? Get specific. Response times for urgent issues versus non-urgent ones. What counts as urgent in their definition.

Who will be our main point of contact? Knowing there is a named person responsible for your account matters. It means someone actually knows your business rather than every interaction starting from zero.

How do you handle onboarding? A good provider will have a clear process for getting your business set up, migrating any existing systems, and making sure your team knows how to get support. If the answer is vague, that is worth probing.

What does your cyber security offering include? Ask specifically about endpoint protection, email security, backup and recovery, and what happens in the event of an incident. You want a clear, confident answer, not a brochure.

Can you provide references from businesses of a similar size? Speaking to existing clients is one of the best ways to understand what a provider is actually like to work with day to day.

What happens if we want to leave? This is an important one. Understand what your data looks like, who owns it, and how a transition would be managed if the relationship ends. A provider who is confident in what they offer will not be uncomfortable answering this.

How quickly can a provider get you set up?

Once you have chosen a provider, most want to move reasonably quickly. A well-organised onboarding process typically takes a few weeks, depending on the complexity of your environment and what needs to be migrated or configured.

What good onboarding looks like: an audit of your current systems, a clear plan for the transition, regular communication so you know what is happening, a training moment for your team, and close monitoring in the first weeks after go-live to catch anything that needs adjusting.

What poor onboarding looks like: a rushed start with minimal documentation, your staff unsure how to get help, and a feeling that the provider has moved on to the next client before your setup is properly bedded in.

Ask any provider you are considering how long onboarding typically takes and what the process involves. Their answer will tell you a lot.

What makes Novatek different

We are a South Island business, and that matters to us. The businesses we work with are our neighbours. We understand the environment they operate in, the challenges they face, and what it means to run a business in this part of New Zealand.

We are also genuinely people-focused. Technology is what we work with, but people are why we do it. When a staff member cannot do their job because something is not working, that is not just a technical problem. It is a human problem. And fixing it quickly, clearly, and without making anyone feel silly for asking is what we are here for.

We do not lock businesses into arrangements that do not serve them. We have honest conversations about what people need, and we build relationships that last because they are based on trust, not just a contract.

The bottom line

Choosing a managed IT provider in the South Island comes down to finding a team that is proactive, responsive, genuinely invested in your business, and honest about what they offer. The questions above will help you tell the difference between someone who talks a good game and someone who will actually deliver.

If you would like to have that conversation with Novatek, we would love to hear from you. No pressure, no jargon, just a straight talk about what your business needs and how we can help.

At some point, most growing businesses hit the same question. Your technology is getting more complex, issues are coming up more often, and you need proper support. But what kind?

Do you hire someone in-house? Stick with the person you call when something breaks? Or move to a managed IT arrangement?

This post works through the options honestly, so you can make the decision that is right for where your business is right now, not just the one that sounds most impressive.

Option one: break-fix support

Break-fix is the traditional model. Something stops working, you call an IT person, they come out and fix it, and you pay for their time. No ongoing contract, no retainer, no commitment.

For very small businesses with simple technology needs, this can work fine. But most businesses that rely on it find the same problems over time.

It is reactive by nature. The only time anyone looks at your systems is when something has already gone wrong. There is no one checking whether your backups are actually running, whether your software is up to date, or whether there is a security issue quietly building in the background.

The cost is unpredictable. A quiet month costs you nothing. A month where your server goes down, your email stops working, and two staff have laptop problems could cost you several thousand dollars. That unpredictability is difficult to manage, particularly for a small business watching its cash flow.

Response times can be slow. Without an ongoing relationship, you are often waiting in a queue behind other clients. When your team cannot work, every hour of waiting has a real cost.

Break-fix support made sense when business technology was simpler and threats were fewer. In today’s environment, it leaves most businesses underserved.

Option two: hiring someone in-house

An in-house IT person is appealing for obvious reasons. They know your business, they are on hand when you need them, and they are fully focused on you rather than split across multiple clients.

But the economics rarely stack up for small and medium businesses, and there are practical limitations that are easy to underestimate.

The cost is significant. A qualified IT professional in New Zealand commands a competitive salary, and that is before you factor in recruitment costs, annual leave, sick leave, training, and the tools they need to do their job. For most SMBs, that is a substantial investment for a single role.

No one person knows everything. Technology is broad. A good generalist IT person will handle the day-to-day competently, but there will be situations that require specialist knowledge, whether that is in cyber security, networking, cloud platforms, or compliance. Unless you are hiring a team, there will be gaps.

What happens when they are not there? Leave, illness, resignation. If your entire IT function sits with one person, your business is exposed every time they are unavailable. And when they leave, you are starting the recruitment process from scratch while your systems carry on without proper oversight.

For businesses with 100 or more staff and complex technology environments, an in-house IT team can make good sense. For most small and medium businesses in New Zealand, it is an expensive solution to a problem that can be better addressed another way.

Option three: managed IT

Managed IT sits between the other two options, combining the proactive, ongoing nature of in-house support with the breadth and cost-efficiency of an external team.

You pay a fixed monthly fee and get a team of people who monitor your systems, maintain them, respond to your staff’s issues, manage your security, and advise you on where your technology is heading. The fee covers all of that, without the overhead of an employee.

The proactive difference. This is the most important distinction. A managed IT provider is not waiting for things to break. They are watching your systems continuously, applying updates, monitoring for threats, and catching problems before they become costly. Most issues are resolved before you even know they existed.

Predictable costs. One fixed monthly cost makes budgeting straightforward. You know exactly what you are spending on IT each month, regardless of what happens.

Access to a full team. Rather than relying on one person’s knowledge, you have access to a team with specialists across the areas your business needs. Networking, security, cloud platforms, compliance — there is someone who knows that area properly.

A relationship that understands your business. Good managed IT is not a faceless helpdesk. It is a provider who knows your setup, your team, and your goals, and who is genuinely invested in keeping things running well for you.

Is managed IT actually cheaper than break-fix?

This is a fair question, and the answer depends on your situation.

On paper, break-fix looks cheaper because you are only paying when something goes wrong. But that calculation tends to ignore a few things.

The cost of downtime. When your systems are down or your team cannot work, that has a real dollar value. Slow computers, email outages, failed backups, and security incidents all cost money, either directly or in lost productivity.

The cost of prevention. Proactive maintenance, security monitoring, and regular updates prevent problems that would otherwise happen. That prevention has value even though it is invisible.

When businesses add up what they actually spend on break-fix support in a year, including the hidden costs, managed IT often compares favourably. And that is before you factor in the peace of mind that comes with knowing someone has your back.

How do you know if your current IT setup is holding your business back?

There are a few honest questions worth asking yourself.

How often does technology cause frustration for your team? If people regularly encounter slow systems, connectivity issues, or software problems that nobody is addressing, that is a sign your current setup is not keeping up.

When did you last have a conversation about where your technology is heading? If the answer is never, or you are not sure, that is a gap worth closing.

Do you know whether your backups are working? Could you recover your data if something went wrong tomorrow? If you are not certain, that is a risk worth taking seriously.

Are your systems being updated regularly? Unpatched software is one of the most common entry points for cyber attacks. If updates are not happening consistently, you are more exposed than you need to be.

None of these things require a crisis to address. But they are much easier to deal with proactively than after the fact.

The bottom line

Break-fix support is reactive and unpredictable. In-house IT is expensive and limited in scope for most small businesses. Managed IT gives you a proactive, consistent, cost-effective way to keep your technology running well and your business protected.

The right choice depends on your size, your complexity, and your appetite for risk. But for most small and medium businesses in New Zealand, managed IT is the model that works best.

If you would like to talk through what is right for your business, the Novatek team is happy to have that conversation without any pressure or obligation.

So you have decided Microsoft 365 is the right move for your business. That is the easy part. Now comes the practical question of how to actually get set up, who should handle it, and what to watch out for along the way.

This post is for business owners and managers who are ready to move forward but want to go in with a clear picture of what the process looks like. Because the truth is, a Microsoft 365 migration done well is smooth and largely invisible to your team. Done poorly, it causes disruption, data headaches, and a lot of frustration.

Here is what you need to know.

Buying directly from Microsoft vs going through a local IT provider

You have two main options for getting Microsoft 365 licences. You can buy them directly from Microsoft through their website, or you can go through a local IT provider who is a Microsoft partner.

Both options get you the same product. The difference is in what comes with it.

Buying directly from Microsoft is straightforward enough. You sign up, choose your plan, enter your payment details, and you are away. Microsoft’s own support is available if you run into trouble, but it is largely ticket-based and not specific to your business or setup.

Going through a local provider means you have someone who knows your business handling the setup from day one. They configure your tenant correctly, set up your domain and email, migrate your existing data, and make sure your security settings are appropriate for your situation. They are also the people you call when something is not working, and they can respond with context rather than starting from scratch each time.

For most small and medium businesses in New Zealand, the managed approach through a trusted local provider is the better path. Not because the direct option is bad, but because getting the setup right from the start saves a lot of pain down the track.

What does the migration process actually look like?

If you are moving from an existing email platform, whether that is a previous version of Outlook, Gmail, or something else entirely, there is a migration process involved. Here is a straightforward overview of what that typically looks like.

1. Planning and preparation. Before anything moves, a good provider will audit what you currently have. How many users? What data needs to come across? Are there any shared mailboxes, distribution lists, or legacy systems to account for? This stage is where the groundwork is laid.

2. Domain verification. Your business email domain needs to be verified and connected to Microsoft 365. This involves some changes to your domain’s DNS settings, which your IT provider will handle. It sounds technical but it is routine.

3. Data migration. Your existing emails, contacts, and calendar items are migrated across. Depending on the volume of data and the platform you are moving from, this can happen quickly or take a little longer. A well-managed migration is done in stages so your team keeps working throughout.

4. User setup and training. Each team member gets their account set up, their devices configured, and a walkthrough of how things work. This is often the most underestimated part of a migration. The technology is only useful if people know how to use it.

5. Go-live and handover. Once everything is tested and confirmed, you switch over. Your team starts using Microsoft 365 as their primary platform, and your IT provider monitors things closely in the days that follow to catch anything that needs attention.

What happens to your data if you cancel your subscription?

This is a question worth asking before you sign up, not after.

If you cancel your Microsoft 365 subscription, Microsoft does not delete your data immediately. There is typically a grace period, often around 30 days, during which your account is disabled but your data is still accessible if you reactivate. After that period, data is deleted from Microsoft’s systems.

What this means in practice is that you should never rely solely on Microsoft 365 as your backup. Your data lives in Microsoft’s cloud, which is reliable and well-protected, but it is not the same as having an independent backup that you control.

A proper backup solution, separate from Microsoft 365 itself, ensures that if something goes wrong, whether that is accidental deletion, a ransomware attack, or a licensing issue, your data is recoverable. This is something your IT provider should have a conversation with you about as part of any Microsoft 365 setup.

Can an IT company manage your Microsoft 365 licences on your behalf?

Yes, and for most businesses it makes good sense to have them do so.

Managing licences sounds simple enough when you have a couple of staff, but as your business grows and people come and go, it becomes surprisingly easy to end up paying for accounts that are no longer active, or to find that new starters have not been provisioned correctly. Security settings drift. Features go unused. Nobody notices until something goes wrong.

A managed IT provider keeps on top of all of that. They handle onboarding and offboarding of users, review your licence usage regularly, and make sure your Microsoft 365 environment is configured in line with current best practices. You get the benefit of the platform without the administrative overhead of managing it yourself.

At Novatek, we manage Microsoft 365 environments for businesses across the South Island. Our job is to make sure the tools are working for the people using them, and that nothing falls through the cracks while you are busy running your business.

A few things to sort out before you get started

If you are ready to move forward with Microsoft 365, here are a few practical things to have in order before you kick off the process.

Know who owns your domain. Your business email domain needs to be transferred or pointed to Microsoft 365. Make sure you have access to your domain registrar account and know the login details. It sounds obvious, but it is surprisingly common for businesses to have lost track of this.

Take stock of what you currently have. Make a list of all the email accounts, shared inboxes, and distribution lists your business uses. The more complete this picture is before migration starts, the smoother things will go.

Think about who needs what. Not everyone on your team needs the same licence level. Having a clear idea of roles and responsibilities helps your IT provider set everyone up on the right plan from the beginning.

Plan for a training moment. Even if your team has used Office tools before, Microsoft 365 has features they may not be familiar with, particularly around Teams and SharePoint. A short session to walk people through the basics goes a long way toward actual adoption.

The bottom line

Getting onto Microsoft 365 is not a complicated process when it is handled properly. The technology is mature, the tools are well understood, and a good local IT provider will make the transition largely invisible to your team.

What matters is that you go in with a plan, that your data is properly migrated and backed up, and that your team is set up for success from day one rather than left to figure things out on their own.

If you are ready to make the move, or just want to talk through what is involved, get in touch with the Novatek team. We will walk you through it step by step.

Done well, it is invisible. Done poorly, or not at all, it can become the single point of failure that an attacker exploits to get inside your systems.

What Is a Patch, Exactly?

A patch is an update released by a software vendor to address a known issue. That issue might be a performance bug, a compatibility problem, or, most critically from a security perspective, a vulnerability.

A vulnerability is a flaw in the software that could allow an unauthorised person to access systems, execute malicious code, or move through a network without detection. Vendors work hard to identify these flaws and release patches quickly. The challenge is that the moment a vulnerability becomes known, it is not just the vendor scrambling to fix it. Attackers are watching too.

The Window of Risk

There is a period between a patch being released and that patch being installed on your devices. Security professionals refer to this as the patch gap, and it is one of the most dangerous periods for any organisation.

The moment a patch is released, the underlying vulnerability it addresses effectively becomes public knowledge. Attackers analyse the fix, understand what flaw it corrects, and look for businesses that have not yet applied it.

This is not a theoretical risk. Some of the most damaging cyber attacks of the past decade were executed not through sophisticated unknown exploits, but through vulnerabilities that already had a fix available. The WannaCry ransomware attack in 2017 affected hundreds of thousands of computers across 150 countries. It exploited a Windows vulnerability for which Microsoft had released a patch two months earlier. Businesses that had applied the patch were protected. Those that had not faced devastating consequences.

Why Businesses Struggle to Keep Up

For a sole trader running a single laptop, keeping software updated is relatively straightforward. For a business running twenty, fifty, or several hundred devices across multiple locations, each with different software and different update cycles, it becomes a significant operational challenge.

Consider what patch management actually requires at scale. You need to know every piece of software running on every device in your network. You need to be aware of every patch release from every vendor whose software you use. You need to test patches to ensure they do not conflict with other software before rolling them out. You need to deploy those patches across all relevant devices in a timely manner. And you need to verify the deployment was successful.

Without a dedicated system, most businesses rely on individual staff members updating their own machines when prompted. Some staff will update promptly. Others will defer indefinitely. Shared machines, servers, and devices used intermittently can go months without updates. Each unpatched device is a potential entry point.

What Good Patch Management Looks Like

Effective patch management is systematic and automated. It does not depend on individuals remembering to click update.

It uses a centralised platform to monitor the patch status of every device on the network, push updates automatically, and report on compliance. A well-run process will categorise patches by severity. A critical security patch addressing an actively exploited vulnerability should be deployed within 24 to 48 hours of release. Other patches can be scheduled in regular maintenance windows to minimise disruption.

Timing matters enormously. Every day that patch gap remains open is a day an attacker could walk through a door you did not know was unlocked.

The Compliance and Insurance Dimension

For some New Zealand businesses, patch management is not just a security best practice. It is a compliance obligation.

Businesses operating under frameworks such as the New Zealand Information Security Manual, ISO 27001, or sector-specific regulations in healthcare and finance are typically required to demonstrate that they manage vulnerabilities in a timely manner. A lack of documented patch management is a red flag in any security audit.

Cyber insurance underwriters have also become increasingly sophisticated. Many now ask detailed questions about patch management practices before providing cover. Some policies include exclusions for incidents where known vulnerabilities had not been patched within a reasonable timeframe. That is a significant financial risk for businesses that assume their insurance will cover them regardless.

The Operational Reality for SMBs

For small and medium businesses in New Zealand, the challenge is often not awareness but capacity. Business owners understand they should be keeping systems updated. They simply do not have the time, the tooling, or the dedicated IT resource to do it consistently.

This is precisely where working with a managed services provider makes a tangible difference. When Novatek manages patch management for a client, we take responsibility for monitoring every device, deploying updates, and verifying that nothing has been missed. The client does not need to think about it, follow it up, or check in on it. It happens in the background, and they have visibility into the status of their environment whenever they want it.

A Practical Question Worth Asking

When did the devices in your business last receive security updates? Not some of them. All of them. Including the machine in the meeting room, the laptop your office administrator uses, the server running your accounting software, and the workstations your field staff log into.

If you cannot answer that question with confidence, your patch management process probably has gaps. And those gaps are exactly what attackers are looking for.

Getting on top of this does not require a major overhaul of how your business operates. It requires the right system and the right partner to manage it.

If you would like to understand where your business currently stands, we are happy to have that conversation. Get in touch with the Novatek team today.

If you have ever Googled “managed IT” and come away with images of the “IT Crowd” TV Show in your head, you are not alone. The term gets thrown around a lot, but the actual meaning tends to get buried under technical language and vendor marketing. So let us cut through that.

This post explains what the term “Managed IT” actually means in practice, how it differs from the kind of IT support you might already be using, and whether it is something your business genuinely needs.

The simple version

A managed IT provider takes responsibility for your business’s technology, on an ongoing basis, for a fixed monthly cost. Rather than calling someone when something breaks and hoping for the best, you have a team watching over your systems all the time, keeping things running, and dealing with issues before you even know they exist.

That is the core of it. Everything else is detail.

What does managed IT actually include?

The specific services vary between providers, but a solid managed IT arrangement typically covers:

Monitoring and maintenance. Your computers, servers, and network are monitored around the clock. Software updates are applied automatically, security patches are managed, and anything that looks like a problem is flagged and addressed before it becomes a crisis.

Help desk support. When your team has a technical problem, there is someone to call who knows your setup. Not a generic call centre, not a Google search, but a real person who understands your business and can sort things out quickly.

Cybersecurity. Antivirus, active threat detection, email filtering, and security configuration are all managed on your behalf. This has become one of the most important parts of any managed IT arrangement, given how much the threat landscape has changed in recent years.

Backups. Your data is backed up regularly and tested to make sure it can actually be restored if something goes wrong. This sounds basic, but a surprising number of businesses discover their backups were not working properly only after they need them.

User management. When someone joins your team, their accounts and devices are set up properly. When someone leaves, their access is removed promptly and securely. This is one of those things that is easy to let slide but genuinely matters from a security perspective.

Strategic advice. A good managed IT provider does not just keep the lights on. They help you think about where your technology is heading, what you will need as your business grows, and how to get more value out of what you already have.

How is it different from regular IT support?

This is where a lot of businesses get confused, so it is worth being clear.

Traditional IT support, sometimes called break-fix, works like this: something goes wrong, you call someone, they fix it, you pay them for their time. It is reactive by nature. The relationship only activates when there is already a problem.

Managed IT flips that model. Your provider is engaged all the time, not just when something breaks. They are proactively maintaining your systems, monitoring for threats, and making sure everything is in good shape. Problems are caught earlier, outages happen less often, and when things do go wrong, the response is faster because your provider already knows your environment.

There is also a cost predictability factor. With break-fix support, your IT bill varies wildly depending on what goes wrong in a given month. With managed IT, you pay a consistent monthly fee and know exactly what you are getting. For a small business trying to manage cash flow, that predictability matters.

What does it mean to have an IT partner rather than just a supplier?

The word “partner” gets used loosely, but there is a real distinction worth drawing here.

A supplier sells you something and moves on. A partner is invested in your success. They understand your business, know your team, and think about your technology in the context of where you are trying to go, not just what is happening today.

When Novatek works with a business, we are not just managing devices and fixing problems. We are thinking about the people in that business. Who is struggling with their computer? Who needs a better setup to do their job well? Where is technology getting in the way rather than helping? Those are the conversations that make a real difference, and they only happen when there is a genuine ongoing relationship rather than a transactional one.

Technology works best when it quietly enables people to do what they do well. When it gets in the way, it becomes a source of frustration, lost time, and missed opportunity. Our job is to make sure it stays on the right side of that line.

How does managed IT work day to day?

For most businesses, the honest answer is that you barely notice it.

In the background, your systems are being monitored, updated, and maintained. Security tools are running. Backups are happening. If something needs attention, your provider handles it, often before anyone in your business is even aware there was an issue.

When your team does need support, they have a direct line to someone who can help quickly. That might be a phone call, an email, or a support ticket through a helpdesk system, depending on how your arrangement is set up.

Once a month or once a quarter, depending on your agreement, you will typically have a review conversation with your provider. What has happened, what is coming up, what should you be thinking about. That is where the strategic side of the relationship comes in.

For the day-to-day stuff, the goal is that technology just works. And when it does not, someone is on it.

Is it right for every business?

Managed IT is a good fit for most small and medium businesses, but it is not a one-size-fits-all answer.

If you have a single employee and your technology needs are minimal, a managed arrangement may be more than you need. But if you have a team of five or more, handle any kind of sensitive data, rely on your systems to serve clients, or have experienced IT problems that cost you time or money in the past, managed IT is worth a serious look.

For businesses in the South Island of New Zealand, the case is particularly strong. Most small businesses here do not have an IT person in-house, and the cost of doing so does not make sense at their size. A managed IT provider gives them access to a full team of people with a broad range of expertise, for a fraction of what a single in-house hire would cost.

The bottom line

Managed IT is not just about fixing computers. It is about having a team that keeps your technology running well, protects your business from threats, and thinks about your people and their needs as your business changes and grows.

If your current IT situation involves a lot of waiting for things to break before anyone does anything about it, it might be time for a different approach.

Get in touch with the Novatek team and let’s have a conversation about what managed IT could look like for your business.

If you have ever tried to work out which Microsoft 365 plan your business should be on, you will know that the options can feel a little overwhelming at first glance. Basic, Standard, Premium — they all sound reasonable, but what do they actually mean in practice? And how do you know if you are paying too much, or not enough?

This post breaks it down in plain terms so you can make a decision that actually fits your business, not just the one that looks fine on paper.

The three main plans for small and medium businesses

Microsoft offers several tiers of Microsoft 365 for business, but the three most relevant for small and medium-sized NZ businesses are Business Basic, Business Standard, and Business Premium. Here is what each one gives you.

Microsoft 365 Business Basic

This is the entry-level plan. It includes web and mobile versions of the Office apps, Teams, Exchange email, SharePoint, and OneDrive. What it does not include is the full desktop applications. So your team can access Word and Excel through a browser or on their phone, but they cannot install them on their computer.

For businesses where most work happens in a browser or on mobile, this can be perfectly adequate. It is also the most affordable option per user per month.

Microsoft 365 Business Standard

Standard adds the full desktop versions of all the Office applications on top of everything in Basic. Word, Excel, PowerPoint, Outlook, and the rest are installed directly on your team’s computers. You also get additional features within Teams and access to some additional business tools.

This is the plan most small businesses in New Zealand end up on, and for good reason. If your team spends a meaningful amount of time in Office applications, having the desktop versions installed makes a genuine difference to the experience.

Microsoft 365 Business Premium

Premium is where the security and device management features come in. On top of everything in Standard, you get advanced threat protection, the ability to manage and secure devices remotely, information protection tools, and a more robust set of compliance features.

For businesses handling sensitive client data, operating across multiple locations, or simply wanting a stronger security posture, Premium is worth serious consideration. The price difference between Standard and Premium is not enormous, and for many businesses the security features alone justify it.

How much does it cost in New Zealand?

Pricing is set in New Zealand dollars and charged per user per month. While exact figures shift from time to time, as a general guide you are looking at roughly:

• Business Basic: around $11 to $14 per user, per month

• Business Standard: around $22 to $28 per user, per month

• Business Premium: around $35 to $40 per user, per month

For a team of ten people, that puts the annual cost somewhere between $960 and $4,800 depending on the plan. When you weigh that against the productivity, communication, and security tools you are getting, it is genuinely good value for most businesses.

It is also worth noting that pricing can vary depending on whether you buy directly from Microsoft or through a local IT provider. More on that in a moment.

Is Business Premium worth the extra cost?

For a lot of small business owners, the jump from Standard to Premium feels like a big one. It is worth asking whether you actually need what Premium offers.

The short answer is that it depends on your situation. If your business handles personal information about clients or staff, stores sensitive financial data, or has employees working remotely on personal devices, Premium’s security features are not a nice-to-have. They are practical protection against real risks.

Cyber threats in New Zealand are not just a problem for large organisations. Small businesses are frequently targeted precisely because attackers know they are less likely to have strong defences in place. Premium includes tools like Microsoft Defender for Business, which gives you proper endpoint protection, and Intune, which lets you manage and wipe devices remotely if something goes wrong.

If your team is small and your data relatively low-risk, Standard may be entirely appropriate. But if you are ever unsure, it is worth having a conversation with someone who understands both the technology and your business, rather than just defaulting to the cheaper option.

Can you mix licence types across your team?

Yes, you can. Microsoft allows you to assign different plan levels to different users within the same organisation. So if you have a handful of staff who need the full Premium security features and others who only need Basic, you can mix and match accordingly.

This is a useful option for businesses where roles vary quite a bit. Someone in a senior position handling client data might warrant a Premium licence, while a part-time staff member doing basic admin might be perfectly served by Basic.

Managing a mixed licence environment does take a bit more attention, but a good IT provider will handle that on your behalf and make sure everyone is on the right plan without you having to track it yourself.

Microsoft 365 vs Google Workspace: which is better for a small NZ business?

This is one of the most common questions we hear, and it is a fair one. Google Workspace is a genuine alternative, and for some businesses it is the right choice. But for most small and medium businesses in New Zealand, Microsoft 365 tends to win out, and here is why.

Most New Zealand businesses already have a relationship with Microsoft tools. Staff know Word and Excel. Clients send documents in Office formats. Suppliers use Outlook. Switching to Google means a learning curve for your team, and it can create friction with external parties who are on Microsoft.

Microsoft 365 also has the edge when it comes to security and compliance features, particularly at the Premium level. And for businesses that need to integrate with other systems, Microsoft’s ecosystem tends to offer broader compatibility.

That said, if you are starting from scratch, have a younger team comfortable with Google’s tools, and primarily work in a browser, Google Workspace is worth evaluating. The key is to make the decision based on what works for your people, not just what is most familiar to you personally.

Should you buy directly or through a local IT provider?

You can buy Microsoft 365 directly from Microsoft, and it is not complicated to do so. But there are good reasons why many NZ businesses choose to go through a local provider instead.

When you buy through a provider like Novatek, you get more than just a licence. You get someone who sets everything up properly, migrates your existing data and email, configures your security settings, trains your team, and is available when something goes wrong. Microsoft’s own support is available if you buy direct, but it is not personalised to your business or your situation.

There is also the matter of pricing. Local providers often have access to partner pricing and can bundle licensing with managed support in a way that works out more cost-effective than managing everything yourself.

The bottom line

The right Microsoft 365 plan depends on the size of your team, the nature of your work, and how seriously you want to take security. Most small NZ businesses will find Business Standard covers them well, with Premium worth considering if data protection is a priority.

What matters most is that whatever plan you are on, you are actually using what you are paying for, and that someone is keeping an eye on it.

If you would like help working out the right plan for your business, or you want to review what you are currently on, get in touch with the Novatek team. We will give you a straight answer.

You may or may not recognise the wallpaper attached to this blog. If you do, you are at least as old as me. This was the standard wallpaper from Windows ‘95, believe it or not. More than 30 years ago.

Nowadays Microsoft are a major player in business software and maybe your current IT provider mentioned it, maybe a competitor switched to it, or maybe you have just been getting emails from Microsoft telling you something is changing. Whatever brought you here, this post is going to give you a straight answer, in plain language, about what Microsoft 365 actually is and whether it makes sense for your business.

No jargon. No sales pitch. Just what you need to know.

So what is Microsoft 365?

Microsoft 365 is a subscription service from Microsoft that bundles together the tools most businesses already use every day. We are talking about Word, Excel, PowerPoint, and Outlook, but also a whole lot more on top of that.

When you subscribe to Microsoft 365, you are not just buying software. You are getting those applications delivered through the cloud, which means they are always up to date, accessible from anywhere, and tied to your team rather than to a specific computer. You also get Teams for communication and collaboration, SharePoint for storing and sharing files across your organisation, and OneDrive for individual cloud storage.

It is worth knowing that Microsoft 365 replaced what used to be called Office 365. If you have been using Office 365, you are already on the same platform. Microsoft simply rebranded it and added more features over time. The name changed, but the core tools are the same.

What does a subscription actually include?

Depending on the plan you choose, a Microsoft 365 subscription for business typically includes:

• The full suite of Office applications, including desktop versions of Word, Excel, PowerPoint, Outlook, and OneNote

• Microsoft Teams for video calls, messaging, and file sharing

• Exchange Online for business email with your own domain

• SharePoint for team collaboration and document management

• OneDrive for cloud storage per user

• Security and compliance tools, which become more robust the higher the plan you choose

The important thing to understand is that everything is connected. Your email, your documents, your team conversations, and your file storage all live in the same ecosystem. That joined-up experience is one of the biggest reasons businesses move to Microsoft 365.

How does it work in the cloud?

This is where a lot of business owners switch off, but it is actually quite simple.

In the old model, you bought a copy of Microsoft Office, installed it on a computer, and that was that. If you got a new computer, you had to buy it again. If Microsoft released an update, you either paid for the upgrade or went without. If your hard drive failed, you potentially lost everything.

With Microsoft 365, the software lives in the cloud. Your files are stored online rather than only on a single device. Your email is hosted by Microsoft rather than on a server in your office. Your applications update automatically in the background without you having to think about it.

In practical terms, this means a staff member can start a document on their work computer, pick it up on a laptop at home, and share it with a colleague in real time. No emailing files back and forth. No wondering which version is the latest one.

For a small or medium-sized business, that kind of flexibility used to be something only large organisations could afford. Microsoft 365 has made it accessible to pretty much everyone.

Is it the right fit for a small NZ business?

This is the question that matters most, and the honest answer is: for most small and medium businesses in New Zealand, yes.

Here is why. New Zealand businesses, particularly in the South Island, often operate across multiple sites, have staff who work remotely or in the field, and do not have a dedicated IT team sitting in-house. Microsoft 365 was built for exactly that kind of environment.

It gives your team a professional business email address, the tools to do their work, and a secure way to store and share information, all without needing expensive on-premise servers or a full-time IT person to keep things running.

It is also worth noting that Microsoft 365 scales with you. Whether you have five people or fifty, you pay per user and add or remove licences as your team changes. You are not locked into infrastructure that is either too big or too small for where you are right now.

What about businesses that are already using it?

If you are already using Microsoft 365, the question shifts from whether to use it to whether you are getting the most out of it.

A lot of businesses are paying for a plan that includes features they have never switched on. Teams is often underused. SharePoint is barely touched. Security settings are sitting at their defaults rather than configured for the business. That is a common situation, and it is worth having someone take a look.

At Novatek, we work with businesses across the South Island to make sure Microsoft 365 is actually set up in a way that works for the people using it. Because the tools are only as good as the people behind them, and if your team does not know how to use what they have, you are not getting what you are paying for.

A few things worth knowing before you move forward

If you are considering Microsoft 365 for the first time, or thinking about switching from another platform, here are a few things to keep in mind.

Migration takes planning. Moving your email, contacts, and files to Microsoft 365 is straightforward when it is done properly, but it needs to be sequenced carefully so your team does not lose access to things mid-move.

Licences are not one-size-fits-all. There are several plans available, and the right one depends on the size of your team, what tools you need, and how much security and compliance functionality you require. Getting the wrong plan means either paying for things you do not need or missing out on features that would genuinely help.

Having someone manage it makes a difference. Microsoft 365 is not difficult to use day to day, but it does need someone keeping an eye on it. User accounts, security settings, backups, and licences all need regular attention. A managed IT provider can handle all of that on your behalf so you can focus on running your business.

The bottom line

Microsoft 365 is not just a software subscription. For most small and medium businesses, it is the foundation of how their team communicates, collaborates, and gets work done. Done well, it is one of the most valuable investments you can make in your business’s day-to-day operation.

If you are not sure which plan is right for you, or you want to make sure you are actually getting value from what you are already paying for, we are happy to have that conversation.

Get in touch with the Novatek team and let’s take a look at what works best for your business.

If you have ever sat through a conversation with an IT professional and heard the word “endpoint” thrown around, you are not alone in wondering what it actually means. It sounds technical. It sounds abstract. But once you understand what an endpoint is, you will also understand why it sits at the heart of almost every cybersecurity conversation worth having.

So, What Actually Is an Endpoint?

In the simplest terms, an endpoint is any device that connects to your business network. That includes the obvious ones: laptops, desktop computers, and smartphones. It also includes the less obvious ones, such as tablets, shared hot-desking machines, and yes, your office printer.

Every single one of those devices is a point of entry. It is a door into your business network, and like any door, it can be opened by someone who is not supposed to be there if it is not properly secured.

For a small business with ten or fifteen staff, that might not sound alarming at first. But consider this: in a team of 50 people, where each person has a laptop, a work phone, and perhaps a tablet or shared desktop, you could easily be looking at 150 or more endpoints. Add in shared devices, reception computers, meeting room screens, and networked printers, and the number grows further. Each one of those devices, if left unmonitored or out of date, represents a gap in your defences.

Why Endpoints Are a Target

Attackers do not typically break through a front door. They look for windows that have been left open. In the context of a business network, those open windows are often endpoints that have not been updated, are running outdated software, or are simply not being watched.

A device that has not received a security patch in three months might have a known vulnerability that attackers can exploit. A personal tablet that an employee takes home and connects to public Wi-Fi before bringing back into the office the next day could carry something unwanted with it. A printer that connects to your network and has never had its firmware reviewed is a device that most businesses simply do not think about, which is precisely why attackers sometimes do.

The threat is not always dramatic. It does not always look like a film-worthy hack. Often it is quieter than that. An attacker gains access through one neglected endpoint, moves through the network carefully, and either sits undetected gathering information or waits for the right moment to cause real damage.

The Shift Away from Traditional Antivirus

For a long time, businesses relied on antivirus software as their primary defence against endpoint threats. It was familiar, it was widely available, and for the threats that existed at the time, it did a reasonable job. The landscape has changed considerably since then.

Modern cyber threats are more sophisticated, more targeted, and more capable of evading the signature-based detection methods that traditional antivirus relied on. Because of this, the industry has largely moved toward what is known as Endpoint Detection and Response, or EDR. Rather than simply scanning for known malware signatures, EDR tools monitor behaviour across your devices in real time, looking for patterns and anomalies that suggest something is wrong.

This shift matters because it changes the posture from reactive to proactive. Instead of waiting for a known threat to show up and trigger an alert, EDR is constantly watching for unusual activity, whether that is a process behaving in an unexpected way, a device attempting to communicate with an unfamiliar external server, or a user account accessing files it has no reason to access.

Visibility Is Just as Important as Protection

One of the most important shifts in thinking around endpoint security is the recognition that protection alone is not enough. You also need visibility.

Visibility means being able to answer questions like: When was each device last online? When did it last receive a software update? Is there a device on the network that should not be there? If something happens, how quickly can we identify the affected device, understand what occurred, and respond?

Without visibility, even well-protected businesses can find themselves in the dark when an incident occurs. They may not know which device was compromised, when the breach happened, or how far the attacker moved through the network before being detected. That lack of information makes recovery slower, more expensive, and more disruptive.

Good endpoint management gives you a clear picture of everything connected to your network at any given time. It means your IT team or managed service provider can see the health and status of every device, receive alerts when something looks wrong, and act quickly when it matters most.

What Good Endpoint Security Looks Like in Practice

For a New Zealand SMB, good endpoint security does not need to be complicated or prohibitively expensive. It does need to be consistent, well-managed, and properly configured.

A managed EDR solution monitors behaviour across all devices in real time, rather than relying on outdated signature-based antivirus tools. The right EDR platform will be configured to your environment and managed by someone who knows what to look for.

Regular patching and updates applied consistently across all devices sounds straightforward, but it is one of the areas where many businesses fall short. Keeping operating systems, applications, and firmware up to date closes off a significant proportion of the vulnerabilities that attackers rely on.

Maintaining a clear picture of what is on your network is equally important. You cannot protect what you cannot see. That means keeping an accurate record of all devices that connect to your network, including those that employees bring in from outside the office.

Having a response plan in place before something goes wrong also makes an enormous difference. Knowing what to do and how quickly to act can significantly change the outcome of an incident.

A Note on Remote and Hybrid Work

The shift toward remote and hybrid working has made endpoint security more complex for many businesses. When devices are only ever on a controlled office network, managing them is relatively straightforward. When those same devices travel between home networks, coffee shops, client sites, and the office, the risk picture changes.

A device that connects to an unsecured home router or public Wi-Fi network is exposed to a different set of risks than one that never leaves the office. This does not mean remote work is inherently unsafe, but it does mean that businesses need to think carefully about how their endpoints are configured, whether devices are using VPNs where appropriate, and how access to sensitive systems is controlled when staff are working away from the office.

The Bottom Line

Endpoints are the devices your people use every day to do their work. They are also the most common target for attackers trying to gain access to your business network. Understanding what they are, why they matter, and how to manage them properly is not just an IT concern. It is a business concern.

If you are not sure how many endpoints are connected to your network right now, or whether they are all properly protected and monitored, that is a conversation worth having sooner rather than later.

At Novatek, we work with New Zealand businesses to get the right security and visibility in place across all of their devices. If you would like to understand where your business stands, we are happy to talk it through.

Get in touch with the Novatek team today.

There is a lot of jargon in cybersecurity. Zero Trust is one of those terms that gets used frequently, often without much explanation, and that tends to create more confusion than clarity. So let us break it down in plain language.

The old way of thinking

For a long time, the dominant model for network security was built around a clear boundary. You had things inside your network and things outside it. Get through the perimeter and you were trusted. Get past the firewall, the login screen, the VPN and you were essentially free to move around and access what you needed.

A useful way to picture it is a nightclub. Once you are past the bouncers, nobody checks your ID again at the bar. You are in, and that is that.

This model made reasonable sense when most people worked from a single office, on company-owned devices, connected to a fixed network. But that world has largely disappeared. People work from home, from cafes, from remote sites. They use personal phones to access company systems. Cloud tools mean data no longer sits behind a single firewall. The perimeter is not really a perimeter any more.

What Zero Trust does differently

Zero Trust is a security framework built on one core principle: never automatically trust anyone or anything, even if they are already inside your network.

It is important to be clear from the outset that Zero Trust is not a single product you can buy and install. It is a philosophy and a framework, a way of thinking about access and identity, that gets put into practice through a combination of tools and policies working together. Understanding that distinction matters, because businesses that go looking for a Zero Trust solution in a box will either be disappointed or, worse, sold something that only addresses part of the problem.

In practice, a Zero Trust approach draws on several layers. Multi-factor authentication is one component, requiring users to verify their identity beyond a password alone. Identity and access management systems play a central role, controlling who can access what and under what conditions. Endpoint verification checks that the device trying to connect meets certain security standards before access is granted. Network segmentation limits how far someone can move through a system even after they are in, containing the potential damage if something does go wrong.

None of these tools are Zero Trust on their own. Together, shaped by a clear philosophy about trust and access, they form an approach that is significantly more resilient than the old perimeter model.

The phrase that captures the underlying principle is simple: never trust, always verify.

Why this matters now

One of the most important reasons Zero Trust has become so relevant is the changing nature of where attacks come from.

There is a tendency to picture a cyberattack as an outsider trying to break in. In reality, a significant and growing proportion of security incidents involve access that was already legitimate, or that appeared to be. The most common scenario is a compromised account, where an attacker obtains someone’s login credentials through phishing, credential stuffing or a data breach, and then uses those credentials to move around inside a network as if they were that person.

Because traditional security models trust anyone who has valid credentials, a compromised account can be very difficult to detect and contain. The attacker is not breaking down a door. They have a key.

There are also cases involving access that simply was not managed carefully enough. Someone who changed roles and retained permissions from their old position. A former employee whose account was not deactivated promptly. A contractor who was given broader access than the job required. These situations are not usually malicious, but they create unnecessary exposure.

Zero Trust addresses both of these problems by limiting what any given user or device can access, regardless of how they got in. Even if an attacker obtains valid credentials, they are contained to a much smaller slice of the network than they would otherwise be.

The honest trade-off

Zero Trust is not without its complications, and it would be misleading to present it purely as an upgrade with no downside.

The most common friction point is for the people using the systems. More verification steps, stricter access controls and additional authentication requirements all add a small amount of work to everyday tasks. In some environments, particularly where people are moving quickly or working across multiple systems, this can feel cumbersome if it is not implemented thoughtfully.

This is why implementation matters as much as the principle itself. A Zero Trust approach that is bolted on without considering how people actually work tends to get worked around. People find shortcuts. They share credentials. They look for ways to reduce the friction, often in ways that undermine the security benefit entirely.

The goal is to make security fit the way a business operates, not to force people to operate around security. That requires an honest conversation about workflows, access needs and risk tolerance before anything is deployed.

Is it right for your business?

Because Zero Trust is a framework rather than a product, the question of whether it is right for your business is really a question of how much of it you want to adopt, and where you want to start.

Many businesses already have elements of it in place without using the term. If you use multi-factor authentication, you are already applying one of its core principles. If you manage user permissions carefully and review them regularly, you are doing the same. The framework does not require a wholesale transformation to deliver value. It can be built incrementally, starting with the areas of highest risk and expanding from there.

For businesses that are growing, adding staff, working across multiple locations or increasingly reliant on cloud-based tools, developing a more comprehensive Zero Trust approach is a genuinely worthwhile investment. The risk profile in those environments is higher, and the potential damage from a compromised account or a misconfigured access policy is more significant.

For smaller or more stable businesses, a more targeted approach may be appropriate, focused on the highest-risk areas rather than every layer at once.

The key in either case is that these decisions should be made deliberately, with a clear understanding of what you are trying to protect and where your current gaps are.

What Novatek thinks about this

At Novatek, we take a practical approach to security. The goal is never to implement something impressive on paper that creates more problems and is oppressive in practice. It is to build security measures that work in the real world, with real people, in businesses that have things to get done.

Zero Trust is a framework we help clients apply in ways that match how they actually operate. Sometimes that means starting with identity and access management and building from there. Sometimes it means addressing a specific vulnerability first. It always means understanding the business before recommending a solution.

If you are curious about how Zero Trust might apply to your situation, or if you are not sure where to start, we are happy to have that conversation. No obligation, just a straightforward discussion about where you are and what would actually help.

If your business has grown steadily over the past few years, there is a good chance your IT setup has not kept pace. What worked for five staff members often struggles under the weight of fifteen. What felt fine two years ago can quietly become a source of daily friction, wasted time, and unnecessary cost.

The tricky part is that IT problems rarely announce themselves dramatically. They creep in slowly, and teams adapt around them without realising the business is paying a real price.

Here are five signs it may be time to have a serious conversation about your technology.

1. Things Keep Breaking, and No One Knows Why

Recurring issues are not just frustrating, they are telling you something important. When the same problems keep surfacing week after week, it usually points to an underlying infrastructure issue that is not being addressed.

A good IT partner fixes root causes, not symptoms. If your team is spending time logging the same tickets repeatedly, or your provider keeps patching the same problems without resolving them permanently, that is worth examining closely.

2. Onboarding New Staff Takes Far Too Long

When a new person joins your business, they should be set up and productive quickly. If getting a new team member up and running takes days or involves guesswork around folder access and permissions, that is a systems problem, not a people problem.

Without proper role-based access controls and a clear onboarding process built into your IT environment, managers end up spending time they do not have sorting out access requests and chasing down the right setup. It slows everyone down and creates a poor first impression for new staff.

3. Your Team Are Using Workarounds

When people start creating their own shortcuts and makeshift solutions to get through the day, it is a signal that the underlying systems are not fit for purpose.

Workarounds feel harmless in the moment, but they accumulate. Over time they create clutter, inconsistency, and sometimes real security risks. If your team is regularly working around your systems rather than through them, the systems need attention.

4. Your IT Costs Feel Unpredictable

If your IT invoice looks different every month and you are not entirely sure what you are paying for, that is a problem. Good IT support should come with transparency around cost and clear visibility of the value being delivered.

Unpredictable costs often go hand in hand with reactive support models, where charges mount in response to incidents rather than being structured around keeping your business running smoothly. Knowing what you are spending and why should not be a mystery.

5. Your IT Is Always in Reactive Mode

Perhaps the clearest sign of an outgrown setup is when your IT provider is permanently chasing their tail. If they are only ever responding to the issues you raise, rather than proactively planning, maintaining, and improving your environment, you are likely not getting the full value of a proper technology partnership.

Proactive IT means regular reviews, forward planning, and advice that connects your technology to your business goals. If those conversations are not happening, they should be.

What to Do Next

If any of these signs feel familiar, it does not necessarily mean your current provider is doing a bad job. It may simply mean your business has reached a point where a more strategic approach to IT is needed.

At Novatek, we work with SMBs across New Zealand to get the foundations right and keep them that way. If you would like an honest conversation about where your technology currently stands, we would be glad to help.

The biggest factor is AI.

AI workloads consume far more memory

Traditional business systems were largely disk and CPU focused. AI systems are different. They rely heavily on memory.

Large language models, analytics platforms, and modern AI assisted tools process huge data sets in memory rather than pulling small chunks from storage. That makes them faster, but it also makes them extremely memory hungry.

Where a typical business server might once have run comfortably with modest RAM, AI driven workloads now expect significantly more memory per system. That shift alone has changed the demand profile for RAM worldwide.

The same supply now supports fewer systems

Memory manufacturing has not suddenly collapsed. What has changed is how much memory each system needs.

When cloud providers and large enterprises build AI infrastructure, they consume vast amounts of high capacity RAM per server. That means the same global production volume now services fewer machines.

As demand per system rises, prices rise with it. This pressure flows down to everyone else, including businesses buying ordinary servers, desktops, and laptops.

Why this is not a short term spike

AI infrastructure investment is not slowing down. Cloud platforms, enterprise vendors, and software providers are all building systems that assume more memory as a baseline.

This makes current pricing less of a temporary spike and more of a new normal driven by sustained demand rather than disruption.

Memory pricing has always moved in cycles, but this cycle is being driven by long term changes in how computing is done.

What this means for businesses

The practical takeaway is simple.

Plan memory requirements carefully. Buy what you need, not what looks impressive on a spec sheet. Make sure systems can be upgraded later rather than over buying upfront.

RAM is no longer an afterthought. It is a core planning decision, especially as AI driven tools quietly make their way into everyday business systems.

If you have ever sat through a conversation about “the cloud” and nodded along without being entirely sure what was being discussed, you are not alone. It is one of those technology terms that gets used constantly but rarely explained well.

So let us fix that.

The cloud simply means “not on your computer”

In straightforward terms, the cloud refers to software, files, or data that is stored and accessed over the internet rather than on a device or server inside your office. Instead of your files sitting on a hard drive or a local server, they live in a data centre somewhere else, and your team connects to them through the internet.

That is it. That is the cloud.

You are probably already using it

Here is something that surprises a lot of people. If your business uses Gmail, Xero, or Microsoft 365 including tools like OneDrive and SharePoint, you have been using the cloud for years. You did not need to make a big decision or go through a formal migration. It just became the way things work.

This is worth acknowledging because it means the cloud is not a leap into the unknown. For most businesses, it is already the foundation of everyday work.

Why people in IT keep talking about it

The reason cloud storage gets so much attention is that it genuinely changes the way businesses manage their technology.

When your data lives in the cloud, you are no longer responsible for maintaining the hardware it sits on. That shifts a significant burden away from your business. Your team can work from anywhere with an internet connection, your data can be backed up automatically, and you only pay for what you actually use. Compare that to a traditional server, where you typically purchase more capacity than you need upfront and then spend time and money keeping it running.

For many small and medium businesses, those advantages are compelling.

The part people sometimes gloss over

Cloud storage is not without its complications. Without proper planning, businesses can run into security gaps, particularly around who has access to what and how data is shared. Costs can also grow faster than expected as the volume of data increases. And there are situations where accessing certain information from specific locations becomes complicated if the setup has not been thought through carefully.

None of these are reasons to avoid the cloud. They are reasons to approach it with a strategy rather than just letting things accumulate over time.

Moving to the cloud, or back again

At Novatek, we work with businesses at both ends of this conversation. Some are looking to move more of their infrastructure into the cloud and want to understand what that involves. Others have been in the cloud for a while and are starting to question whether it is still the right fit, particularly as their data volumes grow and costs climb. In some cases, moving certain workloads back to an on-premise server makes more sense.

The right answer depends on your business, how your team works, what your data looks like, and what you want to spend.

Where to start

If you are not sure how your business currently stores its data, or if you have a vague sense that your setup has grown without much planning behind it, that is a perfectly reasonable place to start a conversation.

We are happy to have a look at what you have, talk through the options, and help you work out what actually makes sense for your situation.

No jargon, no sales pitch. Just a straightforward conversation about what is right for your business.

Get in touch with the Novatek team at www.novatek.nz

That distinction matters.

In most modern incidents, the lasting damage is rarely caused by the initial failure alone. It is caused by uncertainty, shifting messages, and the loss of trust that follows. This is what quickly kills brands that have been painstakingly built over a long period of time.

Uncertainty does the real damage

When information changes over time or lacks clarity, people fill in the gaps themselves with speculation. They assume information is being withheld, even when that may not be the case.

From a reputational perspective, this is where control is lost.

Unclear messaging creates doubt.

Doubt leads to speculation.

Speculation spreads faster than facts.

Once that happens, the organisation is no longer shaping the conversation.

Trust is harder to restore than systems

Most people accept that systems can fail. What they struggle with is feeling misled or underinformed.

Early certainty that later needs revision, even for valid reasons, weakens confidence quickly. Whether the perception is fair becomes irrelevant. Trust does not respond well to corrections.

In sectors handling sensitive personal information such as health sector, this effect is amplified. The issue is no longer technical. It becomes personal.

Every breach is a trust event

Incidents like this reinforce a simple reality. Data breaches are judged as much on response as on cause.

Reputation is shaped by how clearly people are told what happened, what it means for them, and what to expect next. The breach may start the problem, but communication often determines its impact.

Businesses that treat incident response as both a technical and reputational exercise recover faster. Those that focus only on systems often discover the real cost later.

The lesson for kiwi organisations

Most New Zealand businesses will never have to face an incident on this scale. All of us, however, rely on trust to maintain our business brand.

Good security reduces risk. Good communication protects reputation. Both are essential.