IT Resources Devon

2FA means two-factor authentication. It adds a second step to a login, usually after the password.

For example, you might enter your password and then use a code from an authenticator app or password manager. 2FA is one of the simplest improvements a business can make to reduce the risk of stolen passwords being used.

API stands for application programming interface. It is a controlled way for one system to connect to another.

A CRM might use an API to send information to an accounts package, or a website might use an API to check availability in another system. APIs are useful, but they should be protected with sensible permissions and secure keys.

Antivirus software checks devices for known malicious files and suspicious behaviour.

Modern protection often goes beyond traditional antivirus, but the aim is the same: reduce the chance of malware, ransomware or harmful downloads damaging your business systems.

A backup is a copy of your data that can be restored if something goes wrong.

Good backups are separate from the original system, tested regularly and protected from accidental deletion or ransomware. For Devon businesses, backups are a core part of business continuity rather than just a technical extra.

Bandwidth describes how much data can move across an internet or network connection in a given time.

Higher bandwidth can help with cloud apps, video calls, file sharing and hosted phones. It is not the only factor in a good connection though; reliability, latency and Wi-Fi quality also matter.

Business continuity is the planning that helps your organisation keep operating when something unexpected happens.

That might include backups, spare devices, documented supplier access, recovery plans, tested restores and clear responsibilities. The aim is to reduce disruption before there is pressure.

Cloud services are applications, storage or systems delivered over the internet rather than running only on one local computer or server.

Microsoft 365, Google Workspace, cloud backups, hosted phone systems and online accounting tools are common examples. Cloud services can make work more flexible, but they still need proper security, access control and management.

A CMS, or content management system, is the software used to create and manage website pages, blog posts, images and menus without editing code directly.

WordPress is a common CMS. For a business website, the important things are clear editing access, regular updates, reliable backups and sensible security controls, so the site stays easy to manage and safe to use.

A cookie stores small pieces of information in a web browser.

Some cookies are functional, such as keeping you logged in or remembering a preference. Others are used for analytics, advertising or tracking. Businesses should understand what cookies their website uses and explain them clearly where required.

CRM stands for customer relationship management.

A CRM usually stores customer details, sales notes, tasks, emails, calls and opportunities. It can be very useful, but only when permissions, backups, integrations and user processes are set up carefully.

Cyber Essentials is a UK scheme that helps organisations check important security basics.

It focuses on practical controls such as secure configuration, access control, malware protection, software updates and firewalls. It is often a useful starting point for small and medium-sized businesses that want a clearer security baseline.

Google Workspace is Google’s business platform for email, calendars, documents, file storage and collaboration.

It can work very well for teams, but it still needs good user management, MFA, sharing controls, device policies and a clear process for starters and leavers.

A helpdesk gives users a clear way to request IT support and gives the support team a way to track issues.

Good helpdesk processes reduce lost messages, repeated questions and uncertainty. They also make it easier to spot recurring problems that need a proper fix.

Hosted VoIP is a business phone system delivered over an internet connection rather than a traditional phone line.

It can support features such as call routing, voicemail to email, mobile apps and easier remote working. The quality of the internet connection and network setup has a big effect on how well it works.

Huntress is a managed endpoint detection and response service. It monitors devices such as laptops, desktops and servers for signs of suspicious activity and helps identify threats that may get past basic protections.

It fits alongside 2FA, password managers, updates and backups. 2FA helps protect account sign-ins, while Huntress helps watch the devices those accounts are used from and supports a faster response if something looks wrong.

IMAP stands for Internet Message Access Protocol. It lets email apps sync messages from a mail server.

Many modern businesses use Microsoft 365 or Google Workspace instead of thinking directly about IMAP settings, but the term still appears when configuring mailboxes, scanners, websites or older systems.

An IP address is a numerical address used by devices and services on a network.

There are public IP addresses used on the internet and private IP addresses used inside local networks. IP addresses are often involved in firewall rules, remote access, printers, servers and internet troubleshooting.

ISP stands for internet service provider.

Your ISP provides the internet connection for your office or site. When choosing a connection, speed matters, but so do reliability, support, contract terms, router options and whether a backup connection is needed.

Keeper is a password manager and secure vault used to store passwords, passkeys, OTP codes, backup codes and other sensitive access information.

For businesses, Keeper can help trusted staff share access safely, generate strong unique passwords and remove access when someone leaves. It should still be protected with MFA, careful permissions and a clear process for who can see each record.

LAN stands for local area network.

It is the network inside your office, usually connecting computers, printers, Wi-Fi access points, switches and other devices. A well-managed LAN makes day-to-day work more reliable.

Least privilege means giving users the minimum access needed to do their work.

It reduces the risk of accidental changes, data exposure and account misuse. In practice, it means reviewing admin rights, file permissions, shared mailboxes and access to business systems.

MDM stands for mobile device management, although it is often used more broadly for managing company devices.

MDM can help enforce security settings, deploy apps, protect business data and remove access from lost or retired devices. It is especially useful for teams using laptops and phones away from the office.

MFA stands for multi-factor authentication. It means using more than one type of check before someone can access an account.

2FA is a common form of MFA. MFA might use a password, OTP code, device prompt, security key, biometric check or risk-based rule. The aim is to make stolen passwords much less useful.

Microsoft 365 is Microsoft’s cloud platform for business email, Office apps, Teams, SharePoint, OneDrive and more.

Many businesses use Microsoft 365 every day but only use part of what is available. Good configuration can improve security, file organisation, collaboration and user management.

An MX record tells the internet which mail servers handle email for a domain.

If MX records are wrong, email may stop arriving. They are commonly changed during email migrations to Microsoft 365, Google Workspace or another mail provider.

A tenant is a dedicated area for an organisation within a cloud platform.

For example, your Microsoft 365 tenant holds your users, domains, mailboxes, security settings and services. Tenant settings are important because they affect the whole organisation.

A ticket is a support request recorded in a helpdesk system.

Tickets help make sure issues are tracked, prioritised and resolved. They also give useful history when the same problem happens again.

TOTP stands for time-based one-time password.

It is the common type of OTP code that changes every 30 seconds in an authenticator app or password manager. It is often used for 2FA and MFA.

Uptime describes how long a system, service or connection is available and working.

High uptime is important for internet connections, websites, servers, phone systems and cloud platforms. It should be considered alongside support quality, recovery options and monitoring.

UPS stands for uninterruptible power supply.

A UPS provides short-term battery power to equipment such as servers, routers, switches or storage devices. It can help protect against brief power cuts and allow systems to shut down safely.

VLAN stands for virtual local area network.

VLANs can separate different types of network traffic, such as staff devices, guest Wi-Fi, phones and servers. This can improve security, performance and management.

VPN stands for virtual private network.

A VPN can provide secure remote access to a business network or protect traffic over an untrusted connection. VPN access should be limited, monitored and protected with MFA.

VoIP stands for voice over internet protocol.

It means phone calls are carried over an internet connection rather than traditional phone lines. Hosted VoIP can be flexible, but it depends on good connectivity and network setup.

WAF stands for web application firewall.

A WAF helps filter and protect traffic going to a website or web application. It can reduce common attacks, but it should sit alongside secure hosting, updates, backups and sensible admin access.

WAN stands for wide area network.

It usually describes connectivity between locations, cloud services or networks outside a single office. Internet connections are often part of a business WAN setup.

Wi-Fi lets devices connect to a network without a cable.

Good Wi-Fi is about more than signal bars. Placement, interference, capacity, guest access, security settings and the underlying internet connection all affect the experience.

WordPress is a widely used content management system for websites.

It can be a flexible platform, but it needs regular updates, secure hosting, careful plugin choices, backups and protected administrator accounts.

Zero Trust is a security approach based on verifying access rather than automatically trusting a device, user or network.

In practice, it often means MFA, least privilege, device checks, conditional access and careful monitoring. For smaller businesses, the principle is useful even when the implementation is kept simple.