IT glossary for small business owners

Controlling who can sign in to which systems and data, and with what permissions. Why it matters: good access management stops staff, ex-staff and attackers reaching data they shouldn't.

A defined way for software programs to exchange data with each other, such as your accounting software sending invoices to your CRM. Why it matters: APIs connect your apps, but each connection is also access to your data that needs securing.

Software that performs tasks that normally need human judgement, such as writing, summarising or data analysis, for example Microsoft Copilot. Why it matters: AI tools can boost productivity but need rules about what sensitive information staff put into them.

A copy of digital data kept so it can be restored if the original is lost, damaged or encrypted by ransomware. Why it matters: a backup only counts if it has been restored successfully in a test.

IT support paid by the hour when something goes wrong, rather than a monthly managed service. Why it matters: costs are unpredictable and nobody is preventing problems in between.

A plan for keeping critical business functions running during a disruption such as an outage, cyber attack or office closure. Why it matters: it decides how your business operations continue while IT is being fixed.

A scam where criminals take over or impersonate a business email account to trick staff, clients or suppliers into paying money or sharing information. Why it matters: it's one of the most common cybercrimes reported by Australian businesses.

Staff using their own device, such as a personal phone or laptop, for work. Why it matters: business data on personal devices needs controls such as mobile device management and remote wipe.

The main chip in a personal computer or server that runs programs. Why it matters: an underpowered CPU is a common reason older computers feel slow.

Using software, data storage or servers over the internet from a cloud service provider, instead of on your own physical devices. Why it matters: it removes the office server but moves responsibility for configuration and security to you and your IT provider.

A company that supplies cloud computing services, such as Microsoft, Google or Amazon Web Services. Why it matters: under the shared responsibility model, the provider secures its platform and you secure your accounts and data.

Storing files on a provider's servers over the internet, such as OneDrive, SharePoint or Google Drive. Why it matters: it makes files available anywhere, but sharing settings need controlling.

An arrangement where an in-house IT person and a managed service provider share IT work. Why it matters: it adds specialist skills and cover for leave without replacing internal staff.

A Microsoft Entra ID feature that allows or blocks sign-ins based on rules, such as requiring MFA or a managed device. Why it matters: it's how MFA is enforced properly in Microsoft 365.

Software for managing customer data, contacts, sales and communications. Why it matters: CRMs hold customer data and personally identifiable information, so access must be controlled.

Email authentication records on your domain that tell other mail servers which senders are genuinely yours. Why it matters: they make it harder for criminals to send electronic mail pretending to be your business.

The plan and technology for getting systems running again after a major outage, such as ransomware, fire or hardware failure. Why it matters: it defines how long you can be down and how much data you can afford to lose.

The internet's address book, which turns names like staticcomputers.com into an IP address computers can find. Why it matters: DNS settings control where your website and email go, so changes need care.

The service on a computer network that automatically gives each device an IP address. Why it matters: when DHCP fails, devices can't connect to the network or internet.

Endpoint security software on computers and servers that detects suspicious behaviour and can isolate a device, going beyond traditional antivirus. Why it matters: most cyber insurers now ask for it.

Scrambling data so it can only be read with the right key. Encrypted data on a lost laptop is useless to a thief. Why it matters: device and email encryption protect sensitive information if something is lost or intercepted.

Any device that connects to your network, such as a laptop, desktop, phone or server. Why it matters: every endpoint needs updates and protection.

Microsoft's identity service (formerly Azure Active Directory) that manages user accounts and sign-ins for Microsoft 365. Why it matters: it's where MFA, single sign-on and conditional access are configured.

A set of eight cyber security controls published by the Australian Signals Directorate, with a maturity model from Level Zero to Level Three. Why it matters: it's the baseline most Australian insurers and government buyers measure against.

The Australian Signals Directorate's replacement for the Essential Eight, announced in June 2026, starting with a chapter called Essentials for enterprise IT. Why it matters: the Essential Eight is expected to be retired around mid-2028.

An older method for sending files between computers over a network. Why it matters: plain FTP isn't encrypted; use secure alternatives for business files.

Hardware or software that controls which network traffic is allowed in and out, to protect internal networks. Why it matters: it's a basic protection, but it doesn't stop attacks that arrive by email or stolen passwords.

The visual part of software, with windows, icons and buttons, as opposed to typed commands. Why it matters: most business software is used through a GUI; admins sometimes need command-line tools too.

The first point of contact for IT problems and requests, by phone, email or portal. Why it matters: who answers, and how quickly, shapes day-to-day IT experience.

The protocol web pages and web servers use to send content across the world wide web. HTTPS is the encrypted version. Why it matters: your website should always use HTTPS.

The code that structures web pages. Why it matters: it's what your website is built from, and what search engines and AI tools read.

A backup that can't be changed or deleted for a set period, even by an administrator. Why it matters: ransomware attackers try to delete backups before encrypting data.

A written plan for what to do, and who to call, during a cyber incident. Why it matters: insurers ask for one, and it saves time when every minute counts.

The company that supplies your internet connection and internet access, such as Telstra or Aussie Broadband. Why it matters: your ISP's reliability and support directly affect whether your office can work.

Microsoft's mobile device management service, included in Microsoft 365 Business Premium. Why it matters: it enforces updates, encryption and security settings, and can wipe a lost device.

A number that identifies a device on a network or the internet. Why it matters: IP addresses are used in firewall rules, remote access and troubleshooting.

A review of your IT systems, security controls and processes against a standard or checklist. Why it matters: it shows where the risks are before an incident does.

Tiers of IT support: Level 1 handles common requests, Level 2 deeper technical problems, and Level 3 infrastructure, security incidents and vendor escalations. Why it matters: small businesses usually need all three through one provider.

The computer network inside your office that connects computers, printers and network devices. Why it matters: a well-designed LAN keeps the office fast and separates guest Wi-Fi from business systems.

Small programs inside Office files that automate tasks. Why it matters: attackers hide malicious code in macros, so the Essential Eight requires blocking macros from the internet.

Malicious software, including viruses, spyware and ransomware, designed to damage systems or gain unauthorised access. Why it matters: endpoint security, patching and staff awareness are the main defences.

A company that runs and supports a business's IT for a regular fee, usually per user per month. Why it matters: it gives small businesses a full IT team without hiring one.

A service where security specialists monitor your systems and respond to threats, usually around the clock. Why it matters: it adds people to the tools, so alerts are acted on.

Microsoft's subscription for email, Teams, cloud storage and Office apps. Business plans are Basic, Standard and Premium. Why it matters: for most businesses it holds almost all their data.

Tools that let a business secure, configure and wipe phones, tablets and laptops remotely. Why it matters: it protects company data on mobile devices, including staff's own device.

A provider that specialises in security services such as monitoring and incident response, rather than general IT support. Why it matters: some businesses use an MSP and an MSSP together.

Signing in with a second proof of identity beyond a password, such as an authenticator app or security token. Why it matters: it stops most attacks that use stolen passwords, and insurers treat it as essential.

A router feature that lets many devices on a local network share one public IP address. Why it matters: it's part of how every office internet connection works.

The part of the Privacy Act requiring covered organisations to notify the OAIC and affected people about data breaches likely to cause serious harm. Why it matters: covered businesses must assess a suspected breach, generally within 30 days.

Setting up IT for a new client or employee: accounts, devices, access and documentation. Why it matters: a good onboarding avoids gaps that cause problems later.

The system software that runs a computer or phone, such as Windows, macOS, iOS or Android. Why it matters: unsupported operating systems stop getting security updates and must be replaced.

Installing software updates that fix security vulnerabilities and bugs. Why it matters: unpatched software is one of the most common ways attackers get in.

An authorised simulated attack on your systems to find weaknesses. Why it matters: it tests defences the way an attacker would.

Any information that identifies a person, such as a name with an address, date of birth or tax file number. Why it matters: PII is what privacy law protects and what attackers want.

Emails, texts or calls designed to trick people into clicking a link, opening a file, or giving away passwords or money. Why it matters: it's the most common starting point for attacks on businesses.

Malware that encrypts or steals data and demands payment to restore or not publish it. Why it matters: protected, tested backups are the main defence.

The Australian Government's online service for reporting cybercrime and cyber security incidents, run by ASD at cyber.gov.au. Why it matters: reporting helps police and ASD respond. The hotline is 1300 CYBER1.

Software IT providers use for remote monitoring, updating and supporting computers. Why it matters: it's how problems are spotted before users notice them.

Recovery point objective (how much data you can afford to lose, measured in time) and recovery time objective (how long you can afford to be down). Why it matters: they decide how often you back up and how you recover.

Software you use online on a subscription, such as Microsoft 365 or cloud accounting. Why it matters: each app needs its own access control and offboarding.

A team, in-house or outsourced, that monitors security data and responds to threats around the clock. Why it matters: small businesses usually access a SOC through an MDR or managed security service.

A system that collects security logs and alerts from across your IT and flags suspicious activity. Why it matters: it gives a SOC the visibility to spot attacks early.

One login that lets staff access multiple applications securely. Why it matters: fewer passwords, and one place to remove access when someone leaves.

The part of an IT contract that sets response and resolution times. Why it matters: without written times, "fast support" is just a promise.

An Australian cyber security certification standard designed for small and medium businesses, with tiered levels. Why it matters: some insurers and clients recognise it as evidence of good security.

A senior IT adviser from your provider who plans technology strategy and budgets with you, part time. Why it matters: small businesses get IT planning without a full-time executive.

Running staff desktops on servers or in the cloud and accessing them from any device, such as Azure Virtual Desktop. Why it matters: it keeps data off local devices and makes remote work easier to secure.

An encrypted connection from a device to a business network over the internet. Why it matters: remote access must be protected with MFA.

A security model that verifies every user and device on every request, instead of trusting anything inside the office network. Why it matters: it suits businesses where staff work from anywhere.

Can't find a term? Ask us in a complimentary IT review.