The San Antonio Small-Business Guide to IT, Security and Staying Online
IT Consulting 23 min read

The San Antonio Small-Business Guide to IT, Security and Staying Online

By San Antonio's Web Design
Order Now — from $299

Watch the Vlog

AI narration
The San Antonio Small-Business Guide to IT, Security and Staying Online

Welcome back to the San Antonio's Web Design vlog. Today we're breaking down: The San Antonio Small-Business Guide to IT, Security and Staying Online.

Read full transcript

Welcome back to the San Antonio's Web Design vlog. Today we're breaking down: The San Antonio Small-Business Guide to IT, Security and Staying Online. You built something real. Maybe it's a food truck parked off Broadway, a family-owned HVAC company in Helotes, a law firm near the Pearl, or a dental practice in Stone Oak. Whatever your business looks like, you've already done the hardest part—you showed up and kept showing up. But now the wiring underneath your business, the technology side, feels like a black box. Something breaks and you don't know who to call. A customer mentions your website was "down for a while." Someone sends you a link about a small business in Converse that got hacked and lost everything. That low-grade anxiety? It's completely normal. And it's fixable. This guide is your steady-handed mentor walking you through every IT and cybersecurity decision a San Antonio small business actually needs to make—not theoretical enterprise stuff, but practical, local, affordable decisions that protect your livelihood and keep your customers trusting you. Want us to handle this for your business? We build high-end, sales-focused websites for just two hundred and ninety-nine dollars, and keep them optimized for a hundred dollars a month. Book your free consultation today with San Antonio's Web Design.

---

The San Antonio Small-Business Guide to IT, Security and Staying Online

You built something real. Maybe it's a food truck parked off Broadway, a family-owned HVAC company in Helotes, a law firm near the Pearl, or a dental practice in Stone Oak. Whatever your business looks like, you've already done the hardest part—you showed up and kept showing up. But now the wiring underneath your business, the technology side, feels like a black box. Something breaks and you don't know who to call. A customer mentions your website was "down for a while." Someone sends you a link about a small business in Converse that got hacked and lost everything.

That low-grade anxiety? It's completely normal. And it's fixable.

This guide is your steady-handed mentor walking you through every IT and cybersecurity decision a San Antonio small business actually needs to make—not theoretical enterprise stuff, but practical, local, affordable decisions that protect your livelihood and keep your customers trusting you. No jargon walls. No upsell panic. Just honest guidance, step by step.

Let's get to work.

---

1. Understanding What "IT" Actually Means for a Small Business

Half the confusion small business owners carry comes from thinking IT is something only big companies need—server rooms, IT departments, the works. That's not reality. For a 5-person plumbing company in Southside SA, "IT" is everything your business uses to function digitally: your website, your internet connection, your computers and phones, your email, your customer data, your accounting software, your security cameras, even your point-of-sale terminal.

When any one of those things hiccups, your business hiccups with it.

### The Three Pillars of Small Business IT

Infrastructure — The physical and cloud-based systems you run on. This includes your router, computers, mobile devices, cloud storage, and internet service provider (ISP).

Security — The policies, software, and habits that keep bad actors out of your systems and your customers' data safe.

Continuity — The plan that keeps you operational when something goes wrong, whether that's a ransomware attack, a burst pipe flooding your server room, or a CPS Energy outage knocking out your building.

When you zoom out, your entire technology footprint fits inside those three pillars. This guide addresses all three, but we'll start from the ground up so nothing gets skipped.

---

2. Choosing the Right Internet Service for Your San Antonio Business

Here's something most IT consultants skip over because it feels too basic: your internet connection is the foundation everything else rests on. A gorgeous website, a cloud-based POS system, a VoIP phone setup—all of it crumbles if your connection is slow or unreliable.

### What's Actually Available in San Antonio

You have real options here, and San Antonio's infrastructure has improved substantially in the past few years:

  • AT&T Fiber — Widely available across most San Antonio ZIP codes. Business-grade plans start around 300 Mbps symmetrical and scale up. Symmetrical means equal upload and download speeds, which matters enormously if you're video-calling clients, uploading large files, or running cloud-based point-of-sale systems.
  • Spectrum Business — Cable-based, widely available, asymmetrical (faster download, slower upload). Good for businesses that consume more than they create.
  • Grande Communications (now Astound) — Strong in certain corridors, competitive pricing, solid support reputation locally.
  • T-Mobile and Verizon Business Internet — Fixed wireless options that have gotten legitimately good for smaller offices or locations where fiber hasn't reached yet. Think businesses in far northwest SA or newer development areas.

### How Much Speed Do You Actually Need?

Stop paying for more than you need—and stop underbuying and wondering why everything lags.

A rough guide: For a business with 1–5 users doing typical office work (email, web browsing, cloud software, occasional video calls), a 100–200 Mbps symmetrical fiber plan is plenty. Add 10–15 Mbps per additional heavy user or for every point-of-sale terminal running cloud-based software. If you're uploading product photos, streaming anything, or running security cameras that back up to the cloud, go symmetrical and size up.

### The Backup Connection You're Not Running (But Should Be)

Power outages don't happen often, but network outages from a single ISP do. If your business completely stops when the internet goes down—think retail, food service with digital ordering, medical offices—consider a failover setup. A secondary connection from a different ISP (or a 4G/5G LTE router as backup) automatically kicks in when your primary drops. The cost is typically $50–$80/month for the backup line plus a decent dual-WAN router, and it has saved more than a few San Antonio businesses from a very bad Saturday.

---

3. Building a Network That Doesn't Embarrass You or Endanger You

Most small business networks were set up by whoever installed the internet years ago. The router is in a closet. The WiFi password is the business name with a "1" at the end. Everything, including customer devices, runs on the same network. This is the setup a hacker dreams about.

### Separating Business Traffic from Guest Traffic

Create two separate wireless networks: one for your business devices (computers, POS systems, printers, security cameras) and one for guests or customer use. Every decent router sold in the last several years supports this. Your ISP's technician can often set it up during install, or a local IT shop can do it for a couple hundred dollars.

Why does this matter? If a customer connects to your WiFi and their device is infected with malware, a separated guest network means that infection can't reach your business devices or payment systems. It's not paranoia—it's the same logic as having a lock on your office door.

### The Right Hardware for a San Antonio Business

Consumer-grade routers from Best Buy are built for homes. They're fine for a one-person home office but they overheat, drop connections under load, and rarely get the security patches they need. For a business, look at:

  • Ubiquiti UniFi — Excellent performance, great web-based management, loved by small business IT professionals across the city. Higher upfront cost, lower ongoing cost.
  • Cisco Meraki Go — More accessible version of enterprise Cisco equipment, designed specifically for small businesses.
  • Eero Pro (Business version) — Simpler setup, good for small spaces or retail environments where you want ease over advanced config.

### Wired Connections Where They Matter

Your POS terminal, your main office computer, your VoIP phone system—these should run on wired Ethernet connections, not WiFi. Wired connections are faster, more reliable, and harder to intercept. Running a few Cat6 cables through the walls of your location is a one-time cost that pays dividends for years.

---

4. Cybersecurity for San Antonio Small Businesses: What You're Actually Facing

Let's talk honestly about what threats are realistic for a small business in San Antonio—not theoretical worst-case scenarios, but the actual attacks that hit real businesses on the south side, the northwest side, and everywhere in between.

### Phishing Emails

This is the number one way small businesses get compromised. An employee gets an email that looks exactly like a QuickBooks invoice, a Microsoft account alert, or a message from your bank. One click on a bad link or one entered password later, and your business credentials are in someone else's hands.

What to do: Train your team to hover over sender email addresses before clicking anything. Verify unexpected requests—especially anything involving payments—by calling the person directly. And use multi-factor authentication (more on that below) so that even a stolen password isn't enough.

### Ransomware

Ransomware is software that locks up all your files and demands payment to restore access. It spreads through phishing emails, unpatched software, and compromised Remote Desktop connections. A landscaping company in Leon Valley, a chiropractic office in Alamo Ranch—these are exactly the kinds of businesses that get hit because attackers know small businesses often don't have hardened defenses.

The FBI's Internet Crime Complaint Center (IC3) reported that ransomware attacks against small businesses account for billions in losses annually, and recovery without a backup can cost more than the original ransom demand.

### Vendor and Supply Chain Attacks

Your business probably uses cloud software—maybe Mindbody, Jobber, Toast, QuickBooks Online, or similar platforms. If your vendor suffers a breach, your data could be exposed even though you did everything right. This is why you should know which vendors hold your customer data, read their breach notification policies, and use unique passwords for every platform.

### The Employee Risk (The Honest Part)

The uncomfortable truth is that most small business security incidents trace back to an employee action—not malice, usually, just an honest mistake. A weak password. An email clicked without thinking. A personal USB drive plugged into the work computer. Your job isn't to assume the worst of your team; it's to build systems that make mistakes hard to make.

---

5. The Cybersecurity Checklist Every San Antonio Business Owner Should Complete

Stop reading for a second and make a note—these are the specific actions that stop the most common attacks. You can do most of these this week without spending a dollar.

### Step 1: Enable Multi-Factor Authentication on Everything

Multi-factor authentication (MFA) means that logging in requires your password plus a second verification—usually a code texted to your phone or generated by an app like Google Authenticator or Microsoft Authenticator. Even if someone steals your password, they can't log in without that second factor.

Enable MFA on:

  • Your email (Gmail, Outlook, whatever you use)
  • Your accounting software (QuickBooks, FreshBooks, Wave)
  • Your cloud storage (Google Drive, Dropbox, OneDrive)
  • Your website hosting and domain registrar
  • Your social media business accounts
  • Any banking or payment platform

### Step 2: Update Everything

Outdated software is a door with the deadbolt removed. Enable automatic updates on every computer, phone, and tablet your business uses. If you're still running Windows 10 machines (Windows 10 reaches end-of-life in October 2025), plan your upgrade path now. An unsupported operating system stops receiving security patches, which means every new vulnerability discovered after that date stays open forever.

### Step 3: Use a Password Manager

If you're reusing passwords or storing them in a spreadsheet, you're one breach away from losing access to everything. A password manager like Bitwarden (free and excellent), 1Password, or LastPass generates and stores unique, strong passwords for every account. Your team only needs to remember one master password.

### Step 4: Run Reputable Security Software

Windows Defender, built into Windows 10 and 11, has improved enormously and is a legitimate baseline. For a step up, Malwarebytes Business or Bitdefender GravityZone are solid, reasonably priced options with good detection rates. Avoid free antivirus tools with aggressive upselling—they often monetize your data in ways you haven't thought about.

### Step 5: Back Up Everything (The 3-2-1 Rule)

Three copies of your data. Two different types of storage. One copy off-site. For a small business, this translates practically to: your files on your computer (copy 1), an automatic cloud backup running daily (copy 2, and that's off-site by definition), plus an external hard drive that you update weekly and keep somewhere besides the office (copy 3). A fire, a flood, or ransomware can't get all three.

---

6. Keeping Your Website Online and Running Right

Your website is your business's front door, open 24 hours a day. If it's down, broken on mobile, or loading slowly, you're losing customers who'll never tell you why they left—they just didn't come back.

### Choosing Reliable Hosting

Cheap hosting is one of the most expensive decisions a small business makes. Those $2.99/month hosting plans oversell server space dramatically, which means your site shares resources with thousands of others and gets slow or goes down during peak traffic. For a San Antonio business that cares about uptime:

  • WP Engine — Premium managed WordPress hosting, excellent support, automatic backups, built-in staging environments.
  • Kinsta — Google Cloud-powered, very fast, outstanding for WordPress sites.
  • SiteGround Business plan — More affordable middle ground, excellent support reputation.
  • Cloudflare Pages or Netlify — For simpler sites or those built on modern static frameworks, these are fast and free to start.

For most local small businesses, a managed WordPress host in the $25–$50/month range is the sweet spot. You get real support, automatic backups, and performance that doesn't make your customers wait.

### SSL Certificates: Non-Negotiable

If your website address doesn't start with "https://" (note the "s"), browsers are literally warning visitors that your site may not be safe. Google also ranks secure sites higher than insecure ones. SSL certificates are free through Let's Encrypt and included with virtually every reputable host. If you're paying extra for an SSL certificate, that's fine—some business types benefit from extended validation certificates for trust signals—but the baseline protection costs nothing.

### Website Backups: Your Safety Net

Your host should be taking automatic daily backups of your website. Confirm this, don't assume it. Log into your hosting control panel and find the backup settings. Verify you can restore from a backup—testing this once is worth more than a hundred conversations about it.

Additionally, tools like UpdraftPlus (WordPress plugin) can send backup copies to your own Google Drive or Dropbox on a schedule you control. When something goes wrong—a bad plugin update, an accidental deletion, a hack—you want a clean backup from before the problem, not a corrupted one.

### Site Speed and the San Antonio Customer's Patience

Research from Google consistently shows that mobile users abandon sites that take more than three seconds to load. Three seconds. Here's how to check yours: go to PageSpeed Insights (pagespeed.web.dev) and enter your URL. It'll give you a score and specific recommendations.

Common fixes for slow San Antonio small business sites:

  • Compress images before uploading (use TinyPNG or Squoosh)
  • Use a caching plugin if you're on WordPress (WP Rocket or W3 Total Cache)
  • Enable a content delivery network (CDN)—Cloudflare has a free tier that makes a meaningful difference
  • Remove unnecessary plugins or apps

### Uptime Monitoring (Free and Worth Doing Right Now)

Create a free account at UptimeRobot. Add your website URL. It will check your site every 5 minutes and email you the moment it goes down. You'll know about outages before your customers have to tell you about them. This takes seven minutes to set up.

---

7. Email: The Part Nobody Takes Seriously Until It's Too Late

Business email deserves its own section because it's simultaneously your most critical communication tool and your most commonly exploited vulnerability.

### Use a Professional Email Address

If your business email is yourname@gmail.com, it's time to change that. A professional email address (you@yourbusiness.com) costs almost nothing—Google Workspace starts at $6/user/month—and dramatically improves how customers and vendors perceive you. It also gives you far better administrative control, security settings, and backup options than a free personal account.

### Email Authentication: SPF, DKIM, and DMARC

These three acronyms sound technical but represent something simple: they're records you add to your domain that tell the email world "yes, this email actually came from us." Without them, spammers can send emails that appear to come from your domain, trashing your reputation and landing your legitimate emails in spam folders.

Your web host or email provider can usually help you set these up. If they can't explain them, that's a red flag about your provider. A competent IT consultant can configure all three in under an hour.

### Business Email Compromise

Business Email Compromise (BEC) is a specific scam where attackers either hack your email account or impersonate your email address to send fraudulent payment instructions to clients or vendors. The FBI reports billions lost to this scam annually, and it hits small businesses constantly.

Defend against it with MFA on your email account, train your team to verbally confirm any wire transfer or payment request that comes by email alone, and watch for subtle domain spoofing—an email from "yourcompany.co" instead of "yourcompany.com" can fool a tired employee.

---

8. Local IT Support: Who to Call and What to Expect

San Antonio has a legitimate ecosystem of IT support options for small businesses. Knowing what's available helps you make a rational decision instead of a panic-driven one.

### Managed Service Providers (MSPs)

MSPs offer ongoing IT support for a flat monthly fee—typically $75–$150 per user per month—and handle everything from monitoring your systems and applying patches to responding when something breaks. For businesses with 5+ employees and meaningful technology dependence, an MSP relationship is often more cost-effective than calling a break/fix technician every few months.

Ask any MSP candidate these questions before signing:

  • What's your average response time for critical issues?
  • Do you have experience with businesses in my industry?
  • What tools do you use to monitor my systems remotely?
  • What's included in the monthly fee versus billed separately?
  • Can you provide references from local San Antonio clients?

### Break/Fix Technicians

For very small operations—solo practitioners, tiny retail shops, home offices—a reliable break/fix technician is often enough. You call when something breaks, they fix it, you pay hourly. Rates in San Antonio typically run $75–$125/hour for on-site work. The risk is response time: a good technician might be booked out two or three days, which is a long time to be down.

### Your Web Design/Digital Marketing Agency

Here's a resource many business owners underutilize. A full-service web design and digital marketing agency in San Antonio often handles website hosting, maintenance, uptime monitoring, backups, SSL management, and email configuration as part of their service stack. This doesn't replace a full MSP, but it does mean your website-related IT needs are covered by professionals who know your digital presence end to end.

### UTSA and Small Business Resources

The UTSA Small Business Development Center (SBDC) is a genuinely useful resource for San Antonio business owners. They offer free consulting on a range of topics, and while they're not IT specialists, they can connect you with programs, funding, and vetted vendors. The Texas A&M AgriLife Extension also runs cybersecurity awareness programs aimed at small businesses.

---

9. Disaster Recovery Planning Without the Corporate Jargon

"Disaster recovery" sounds like something Fortune 500 companies do in conference rooms with slide decks. For your business, it's just this: what happens if something goes very wrong, and how do you get back to normal?

### Define Your Recovery Time Objective

Ask yourself honestly: if your website, computers, or internet went completely down right now, how long could your business operate before it started costing you real money? Two hours? One day? One week? That answer is your Recovery Time Objective (RTO), and it should drive how seriously you invest in redundancy and backups.

A restaurant that takes digital orders needs a much more aggressive recovery plan than a solo bookkeeper who can work from a notebook for a day.

### The San Antonio Scenarios to Plan For

Extended power outages — CPS Energy does a solid job, but severe weather events (ice storms hit the city harder than most people expect) can knock power out for days. A UPS (Uninterruptible Power Supply) device keeps your network equipment and computers running during brief outages and provides clean shutdown during extended ones. For businesses that truly can't go offline, a generator is worth calculating into the budget.

Water damage — San Antonio sits in a flash flood zone in many areas. Elevate server equipment, use waterproof storage for backups, and know where your equipment shutoffs are.

Hardware failure — Computers fail. Hard drives die. Have a plan for replacing critical hardware within 24 hours. Keeping a spare laptop configured and ready isn't overkill for a business that depends on one primary machine.

### Your One-Page Business Continuity Plan

Write it down. Seriously—one page, and it covers:

1. List of critical systems (website, POS, accounting software, email)

2. Backup contacts for each system (hosting provider phone number, IT support contact, ISP business support line)

3. Location of all backups and how to restore them

4. Which employee is responsible for which recovery step

5. How you'll communicate with customers during an outage

This document should live somewhere that isn't your computer. Print it. Put it in a drawer.

---

10. Protecting Customer Data and Staying on the Right Side of Privacy Rules

You collect customer data. Names, emails, phone numbers, payment information, health information if you're in healthcare, financial information if you're in professional services. That data carries legal and ethical weight.

### What Texas Requires

Texas has the Texas Privacy Protection Act (and new legislation moving through the legislative process regularly). At a minimum, you're required to have a privacy policy if you collect personal data online, notify affected individuals promptly if you experience a data breach, and maintain reasonable security practices for sensitive data.

"Reasonable security practices" isn't precisely defined, which means a court would look at whether you took steps a prudent business would take. The checklist in Section 5 of this guide? That's what reasonable looks like.

### PCI Compliance for Businesses That Take Payments

If you process credit cards—and almost every business does—you're subject to PCI DSS standards. This isn't optional and isn't small print. Key requirements include: using point-to-point encryption at the POS terminal, never storing full card numbers, running your POS on a separate network segment (that guest/business network separation we covered), and completing annual PCI self-assessment questionnaires.

Your payment processor (Square, Toast, Clover, Stripe) handles much of this automatically, but the network segmentation and good password hygiene are your responsibility.

### HIPAA for San Antonio Healthcare Businesses

Dentists, chiropractors, mental health practices, urgent care clinics, wellness studios that handle health records—if you're in healthcare in any form, HIPAA applies. This means encrypted email when sending patient information, Business Associate Agreements with any vendor who touches that data, and formal security policies in writing.

This isn't an area to figure out yourself. A local IT consultant with healthcare experience or a healthcare-focused law firm can help you build a compliant foundation.

---

11. Technology Budgeting for Small Businesses: Real Numbers

Nobody likes budget conversations. Let's do it anyway.

### A Reasonable Annual IT Budget by Business Size

Solo/micro business (1–2 people):

  • Internet service: $600–$960/year
  • Business email (Google Workspace): $72–$144/year
  • Password manager: Free (Bitwarden) to $36/year
  • Security software: $40–$80/year
  • Website hosting: $300–$600/year
  • Backup solutions: $60–$120/year
  • Realistic total: $1,000–$2,000/year

Small business (3–10 employees):

Add managed IT support or a partial MSP engagement, better hardware, employee security training, and you're looking at:

  • Realistic total: $4,000–$12,000/year

Growing business (10–25 employees):

Full MSP relationship, structured backup and recovery, possible cyber liability insurance:

  • Realistic total: $15,000–$35,000/year

These numbers are rough guides, not quotes. But they give you a framework for what "doing this right" actually costs—and it's probably less than you feared.

### Cyber Liability Insurance: Strongly Consider It

Cyber liability insurance covers you if you suffer a breach, ransomware attack, or business interruption from a cyber incident. Premiums for small businesses typically run $500–$2,500/year depending on your industry, revenue, and security posture. For a business that would genuinely struggle to survive a significant cyber incident, this is basic risk management. Ask your current business insurance agent about adding a cyber endorsement.

---

12. Making Smart Technology Decisions Without Getting Oversold

Vendor salespeople are not bad people, but their incentives don't always align with your interests. Here's how to evaluate technology purchases without getting talked into something you don't need.

### The Three Questions to Ask Every Vendor

"What problem does this specifically solve for my business?" If they can't answer this clearly for your situation, not a hypothetical business, that's a concern.

"What does the total cost look like over two years?" Licensing, support, training, integration with your existing systems—the sticker price is rarely the actual cost.

"What does it cost to leave this platform if we're unhappy?" Data portability, contract terms, cancellation fees. Know these before you sign.

### Cloud vs. On-Premise: What Makes Sense

Most small businesses are better served by cloud-based software—lower upfront cost, automatic updates, accessible from anywhere, better vendor-managed security. On-premise setups (software running on your local server) make sense for specific industries with compliance requirements or very specific data sovereignty needs. If a vendor is pushing you toward expensive on-premise infrastructure for a standard business function, push back.

### The Technology Audit You Should Do Annually

Once a year, list every technology subscription and service you're paying for. Cancel anything you're not actively using. Verify that everything you are using is still the best fit. Technology needs evolve, and the bookkeeping software you needed at launch might not serve you well at year three.

---

13. Your Website's Role in Local Search and Staying Visible in San Antonio

Your website doesn't just need to be online—it needs to be findable by the right people in the right places. This connects IT and digital marketing at the seam.

### Google Business Profile: Free and Critical

If you haven't claimed and fully optimized your Google Business Profile (formerly Google My Business), do it today. This is what shows up when someone searches "HVAC repair near me" or "dentist in Stone Oak." Your hours, phone number, photos, reviews, and location accuracy all live here. It's free, it's powerful, and most small businesses in San Antonio have an incomplete or unmonitored profile.

Keep your information consistent across Google Business Profile, your website, Yelp, Facebook, and any other directory where you appear. Inconsistent NAP (Name, Address, Phone) data confuses both search engines and customers.

### Local SEO Basics That Actually Matter

Search engine optimization for local businesses isn't about gaming algorithms—it's about clearly communicating who you are, where you are, and what you do. Practical steps:

  • Include your city and neighborhood in your page titles and content naturally (not stuffed awkwardly)
  • Create service pages for each major service you offer, not one catch-all page
  • Earn reviews from real customers on Google—not by incentivizing them (against Google's terms), but by simply asking satisfied customers
  • Get listed in legitimate local directories (San Antonio Chamber of Commerce, BBB, industry-specific directories)
  • Make sure your site loads quickly on mobile—the majority of local searches happen on phones

### Your Website as a Trust Signal

San Antonio customers often check a business's website before calling, even after finding you through word of mouth or a referral. An outdated website, one that looks like it was built in 2012, tells that customer something. It tells them you might not care about details, or that the business might not be doing well. A clean, fast, current website with clear contact information, real photos, and honest service descriptions converts that visitor into a caller.

---

Frequently Asked Questions

Q: Do I really need to pay for IT support if I only have two employees?

Not necessarily full managed IT support. But you do need someone you can call when something goes wrong—a local IT contact or a good relationship with your software vendors' support teams. And you absolutely need the basics: MFA, backups, and professional hosting.

Q: My website is on Wix/Squarespace/GoDaddy. Is that okay?

These platforms are legitimate starting points. The concerns are speed limitations, limited customization as your business grows, and the fact that you don't truly own your site—you're renting space on their infrastructure. If your business is growing and your site needs to do more, migrating to a professional WordPress or custom-built site on quality hosting is worth the investment.

Q: How do I know if my business has already been hacked?

Check Have I Been Pwned (haveibeenpwned.com) with your business email addresses. This database tracks known credential leaks. Signs of compromise include: emails you didn't send in your Sent folder, login alerts from unfamiliar locations, software behaving strangely, or a slow-down in computer performance.

Q: Is it worth paying for a local IT consultant versus using a national company?

Local has real advantages. They understand San Antonio's infrastructure, they can come on-site when needed, and you can talk to their other local clients. A hybrid can work—local consultant for on-site support, national MSP platform for monitoring—but don't discount the value of someone who can physically show up.

Q: How often should I update my passwords?

The old advice of changing passwords every 90 days is outdated. Current NIST guidance says to change passwords when you have reason to suspect compromise, and to focus on strong, unique passwords managed by a password manager rather than frequent forced changes. The habit that matters most is using a different password for every account.

Q: What should I do first if I think I've been hacked?

Disconnect the affected device from your network immediately—physically unplug the Ethernet cable or disable WiFi. Don't turn it off (some forensic evidence lives in RAM). Call your IT support contact. Change passwords to critical accounts from a different, unaffected device. Contact your bank if financial systems may be involved. Report to the FBI's IC3 at ic3.gov if you've lost money.

Q: My employees want to use their personal phones for work. Is that safe?

It can be, with the right policies. A Mobile Device Management (MDM) solution lets you require PINs, encrypt business data, and remotely wipe business data from a lost device without wiping personal photos. Google Workspace and Microsoft 365 both include basic MDM capabilities at no extra cost.

---

The Bottom Line: You Don't Have to Figure This Out Alone

Here's what I want you to take from all of this: the businesses that get into serious trouble aren't the ones that made sophisticated mistakes. They're the ones who assumed everything was fine and never asked the hard questions. You're reading this guide, which means you're already ahead.

You don't need to become an IT expert. You need to make a handful of good decisions—better hosting, MFA everywhere, solid backups, a contact you trust for when things go sideways—and build those decisions into habits. San Antonio is a city of builders and hustlers and people who take pride in their work. Your technology should hold up to that same standard.

Start with the checklist in Section 5. Do those things this week. Then come back and tackle hosting, then backups, then get a conversation going with a local IT professional. One step at a time, and suddenly you're the business in your neighborhood that other owners are asking for advice.

---

Ready to see exactly where your business stands?

Get your free Business Growth Score—a no-pressure evaluation of your website, local visibility, and digital security posture from a team that's worked with San Antonio small businesses for years. Or, if your website is overdue for a real upgrade, ask us about our $299 professional website built to perform, load fast, and represent your business the right way.

[Claim Your Free Business Growth Score Today →]

No sales scripts. No corporate runaround. Just an honest look at your business from people who know San Antonio.

Free AI Growth Report

Get Your Free Business Growth Score

See your growth score, find missed opportunities, and get a plan to win more customers — in 30 seconds.

Get my score

Ready to turn traffic into revenue?

Get a high-end, sales-focused website for $299. First-time customers save $50.

Blog

Web design, SEO, and marketing insights to help San Antonio small businesses grow online.