Question 1

First IT setup as a freelancer, what do you actually need

Accepted Answer

1. Buy one decent laptop, minimum 16 GB RAM and SSD. A business model with three-year warranty costs more but outlives the consumer machine that gets sluggish after eighteen months.
2. Register your own domain and put a mailbox on it via Microsoft 365 Business Basic or Google Workspace Business Starter. A gmail.com or outlook.com address looks amateur and you cannot take the domain with you later.
3. Set up a password manager (Bitwarden, 1Password). One strong master password, everything else generated. Starting small costs nothing, switching later costs days.
4. Arrange a backup for your laptop. OneDrive or Google Drive for documents, plus an external disk for everything else. One copy is no copy.
5. Turn on MFA for your mailbox, your bank, your accounting tool, and your domain registrar. The registrar is often forgotten, even though it controls every mail address you have.

When to bring us in: 
If you handle a lot of client data (health, finance, legal) or you fall under NIS2 supplier requirements as a sole trader, the minimum above is not enough. A short call saves rework later.

Question 2

Hiring your first employee, what IT to arrange before day one

Accepted Answer

1. Order the laptop at least two weeks before the start date. Business models often have one to two weeks lead time and you want it imaged before they walk in.
2. Create a mailbox and a personal account. Do not let them log in under your name. A personal account means you can see what they did and close access cleanly later.
3. Turn on MFA during the very first login and let them set up their own authenticator app. Saves a round of panic at the first phone swap.
4. Pick one shared location for files (SharePoint library or Drive shared drive). Grant access to the folders relevant to their role, not blanket access.
5. Write half a page about which systems you use and how to reach them. First-week onboarding is usually "ask someone" and that does not scale.

When to bring us in: 
If this hire will work with client data or financial systems, you want more than a checklist. A real starter-policy with logging and device management is not a luxury.

Question 3

Moving to a new office, IT checklist

Accepted Answer

1. Order the internet line as soon as the lease is signed. Fibre to a new building can take weeks to months if no connection is in place yet. Call the provider and ask explicitly about lead time for this address.
2. Inventory what moves and what stays. Include cabling, switches, access points, printers, and NAS. Photograph the current cabling before you unplug anything.
3. Plan an overlap week. The old line stays live while the new one is already tested, and you switch over on a quiet weekend. Do not disconnect and reconnect on the same day.
4. Update your address at the chamber of commerce, in email signatures, on the website, in Google Business Profile, on invoices, and in every SaaS tool. One spreadsheet avoids mail still arriving at the old address weeks later.
5. On move day test internet first, then printers, then VoIP, then shared folders. If one of those four fails you want to know which before the first employee opens their laptop.

When to bring us in: 
If you are moving more than ten workplaces, a new meeting-room AV setup, or changing internet provider on top of moving, we will gladly help. A failed move-Monday costs more than a day of preparation.

Question 4

Picking internet for a small office, fibre vs business DSL vs 5G

Accepted Answer

1. First check whether fibre is available at your address. Compare two or three business providers. Ask explicitly about SLA, static IP, and up- and download speed in both directions.
2. Fibre coming but only in 2027? Order a temporary 5G or 4G line as a bridge. Not a permanent solution, plan it at the same router position so the switch later is simple.
3. DSL is only still acceptable as a business secondary line for failover. As primary it is too slow for video calls, cloud uploads, and large file shares.
4. Ask every provider for the actual lead time for your address. "Lead time" on a product page and lead time in your street are often not the same.
5. For a small team (up to fifteen) a symmetric connection is usually plenty. Watch out for "up to X Mbit" wording, you want a guaranteed minimum speed in the contract.

When to bring us in: 
With more than twenty workplaces, video conferencing as a core activity, or a second site sharing the same line, price is no longer the only criterion. A short review prevents complaints about choppy Teams calls in month two.

Question 5

First email address, own domain vs Microsoft 365 vs Google Workspace

Accepted Answer

1. Register your own domain first with a serious registrar. Using gmail.com or outlook.com for your business looks amateur and you lose the address whenever you change provider.
2. Then pick between Microsoft 365 or Google Workspace. Heavy Excel, Word, PowerPoint user? Microsoft. Customers and partners already on Google with lots of Docs and Sheets? Google. Switching is possible later but costs half a day per employee.
3. Start with the cheapest tier (Microsoft 365 Business Basic or Google Workspace Business Starter). Premium features can be added later when you need them, not preemptively.
4. Set up SPF, DKIM, and DMARC immediately. Without them your mails land in spam at any serious recipient. The provider gives instructions, it is one DNS round.
5. MFA on your own account before you invite anyone else. A hacked director mailbox ruins your day.

When to bring us in: 
If you want to leave a gmail.com or outlook.com address now without losing customers, we will help. Migration without downtime takes more than a few clicks.

Question 6

Company renamed, what to do on the IT side

Accepted Answer

1. Register the new domain right away, even if the name only goes live in a few months. Otherwise someone else grabs it.
2. Add the new domain as an alias in your mail tenant. Inbound mail on either name lands in the same mailbox. Two to three months of parallel operation is usual.
3. Set up a friendly auto-reply on the old address pointing to the new one, and keep it active for six to twelve months.
4. Update systematically: chamber of commerce, tax office, bank, signatures, website, Google Business Profile, invoice templates, contracts, supplier portals, SaaS accounts. One list, ticked off.
5. Set 301 redirects from old to new on the website, and apply SPF, DKIM, DMARC to the new domain. Otherwise the first wave of mail under the new name lands in spam.

When to bring us in: 
If the rename coincides with a legal restructure or acquisition, more systems are entangled than a checklist catches. Aligning with your accountant and with us prevents missing contracts or lost customer mail.

Question 7

Restart after bankruptcy, IT handover checklist

Accepted Answer

1. Do not log into old systems until the administrator gives formal permission. Otherwise you are legally in the wrong, however awkward when business needs to keep moving.
2. With the administrator make a list of what transfers: domain names, mailboxes, customer data, source code, licences, hardware. Do not assume it all moves automatically.
3. As a new entity, register your own domain, your own mail tenant, your own accounting tenant. Do not build on top of the old tenant, which is tied to the bankrupt party.
4. Tell customers explicitly that the restart is a new legal entity with a new bank account, new IBAN, possibly a new email address. In writing, not just verbally.
5. Set forwarders on the old domains only after the administrator has signed the handover. Until then those domains are not yours.

When to bring us in: 
A restart almost always needs a serious conversation with your accountant and legal counsel, and we will join in. The IT side is rarely the hardest part; the legal timing around data and customer relationships is.

Question 8

Handing the business to a successor, which accounts and licences transfer

Accepted Answer

1. Make a list of every system where you are admin or owner. Domain registrar, hosting, mail tenant, accounting, bank, chamber of commerce, Google Business Profile, social media, every SaaS. Cross-check inbox logins and bank statements so nothing is missed.
2. Add the successor as a second admin or owner everywhere before you remove anything. Add first, test, then remove yourself, not the other way round.
3. The domain registrar is the most sensitive. Whoever owns the domain can hijack the mail. Confirm a written handover and a test login by the successor before you leave.
4. Accounting and bank run on separate tracks with the bank and the accountant. Plan those separately, they often take weeks.
5. Write a handover document listing every system, account, licence, contract, renewal date, and who owns which password. Better too thorough than too thin in this document.

When to bring us in: 
If the handover touches a live customer relationship or a major SaaS licence whose annual renegotiation falls during the handover, we will help build the runbook. That is not overcaution.

Question 9

Connecting your first accounting tool to mail and invoicing

Accepted Answer

1. Pick a tool widely used in the Netherlands (Moneybird, e-Boekhouden, Yuki, Exact Online). Ask your accountant first which one they prefer; their hourly rate drops if they do not have to learn.
2. Activate the PSD2 bank link immediately. Matching statements by hand gets old after a month and steals time better spent on clients.
3. Set up your invoice template: logo, chamber of commerce number, VAT number, IBAN, clear payment terms. No layout games, a clean invoice looks professional and gets paid faster.
4. Hook up mail-to-invoice if available. Many tools read inbound supplier invoices via a unique import mailbox. Saves scanning and typing.
5. From invoice one, attach a UBL file or connect to Peppol. E-invoicing is becoming a B2B requirement (check the tax office and Ondernemersplein for the actual date). Better to set up now than to scramble later.

When to bring us in: 
If you cross the VAT threshold, sell internationally, or use margin schemes, have your accountant review now. That saves four quarterly corrections later.

Question 10

From laptop-in-bag to a real office, minimum setup

Accepted Answer

1. Invest in a dock that fits your laptop. One cable to the desk means the laptop does not slide in and out three times a day.
2. A second monitor changes your day. 27-inch, USB-C or HDMI, height-adjustable. Not a luxury, it is the workplace version of a second hand.
3. Cable where you can. A workstation on Ethernet stutters less than the same one on wifi, especially during calls.
4. A real chair. Not the dorm-room desk chair. Treat ergonomics as a business cost, not a personal bonus.
5. Headset with USB-C or USB-A. Bluetooth has its moments, for business calls a wired headset is still more reliable.

When to bring us in: 
When you grow from two to six workplaces, you start thinking about uniformity (same dock, same screen, same headset). One supplier saves support time. Ad-hoc clutter does not.

Question 11

How much workspace does a person need, including IT

Accepted Answer

1. Plan a worktop of at least 140 by 70 cm per person. Laptop, two monitors, notebook, and coffee mug fit without it being a puzzle.
2. At least four power sockets per workstation. Laptop, monitor, dock, phone charger. Power strips under the desk are acceptable as a transitional solution, not permanent.
3. One network jack (RJ45) per workstation, even if you primarily use wifi. During large calls or uploads cabled is noticeably more stable.
4. Acoustics. Open offices without sound panels become tiring. One or two panels and a small rug reduce fatigue and headaches.
5. Keep at least one separate meeting or call spot per three to four workstations. Calling from the desk gets annoying for neighbours once you have more than three colleagues.

When to bring us in: 
A renovation or new office wants someone with workplace-safety and ergonomics expertise. We focus on the IT side: cabling, socket placement, wifi coverage, and acoustics for video.

Question 12

Grown from five to 25 people, when do shared drives become a problem

Accepted Answer

1. Inventory which shared drives exist today. Personal OneDrives with colleagues invited in, shared mailbox attachments, a 2018 NAS, and a SharePoint half the team cannot reach.
2. Pick one place as the place. SharePoint document libraries or Google Shared Drives. Not OneDrive, because OneDrive is personal and files disappear when the owner leaves.
3. Create a folder structure per team or project, not per person. Plus one central "General" for HR, contracts, and official documents. One level of order beats three levels of search.
4. Set rights at folder level, not per file. And via groups ("Sales", "Operations") rather than per person, otherwise you are clicking through every onboarding by hand.
5. Ban file attachments in internal mail. "Send the link" becomes the norm. Saves six versions of one file across six inboxes.

When to bring us in: 
Past 20 people you want governance too: retention, retention labels, audit logs, and one owner per top-level folder. We set that up without slowing anyone down.

Question 13

Picking your first time-tracking tool

Accepted Answer

1. First ask how you invoice: hourly, per project, fixed-fee, or mixed. An hourly agency has different needs from a fixed-fee project shop.
2. Look at tools commonly used here: Moneybird time tracking, Yuki + Toggl, Harvest, Clockify, Loket for HR plus hours. Ask your accountant which integration runs smoothly.
3. Start small, one tool, not three. Better to use Toggl well than Toggl, Excel, and a Trello board contradicting each other.
4. Set a fixed entry cadence. Weekly Friday afternoon is realistic, daily at 5 p.m. is an ideal that rarely sticks. Weekly properly beats daily half-done.
5. Connect time tracking to invoicing if the option exists. Copy-paste hours from Excel to invoice is exactly where errors creep in.

When to bring us in: 
If you also want leave, sick days, and CLA allowances in the same system, you are entering HR territory (Loket, Nmbrs, Visma). Different beast from time tracking, deserves its own choice.

Question 14

Onboarding routine for account, laptop, and training

Accepted Answer

1. Two weeks before start: order laptop, create account, add to groups, prepare welcome-mail template. Waiting for day one is always too late.
2. One week before: image the laptop, install the standard apps, test login with MFA, and send the welcome mail to the private address with the work credentials.
3. Day one: short tour of the tools, not a dump of twelve systems. One or two important ones first. Hand over a one-pager with "where do I find what".
4. First week: assign a buddy. Someone other than the manager, who makes silly questions easy to ask. Halves the learning curve in most teams.
5. First month: one 1-on-1 with the manager about how it is going and what was unintentionally missed. Onboarding is never complete on day one, design for that.

When to bring us in: 
If you onboard more than ten per year, manually walking through it gets tiring and error-prone. Time for a checklist-driven onboarding workflow (we have built a few for other clients).

Question 15

Offboarding in the right order: what closes when

Accepted Answer

1. Plan offboarding as soon as the leaving date is known, not on the last day. Make a list of every system this person has access to. Without a list, you will forget something.
2. On the last day: disable the account in your mail tenant. Not delete, disable. That preserves the mailbox for archive and autoreply while login is blocked.
3. Set an autoreply forwarding senders to a colleague. Keep it active at least three months, ideally six.
4. Cancel SaaS licences only after the mailbox is disabled. Otherwise invoices keep arriving for an empty seat.
5. Hardware return at an agreed moment: laptop, phone, keys, badge. Capture it on a short leaving form that both parties sign.

When to bring us in: 
For a conflict departure or someone with admin rights in your tenant, you want to close faster and keep an audit log. Not distrust, just good housekeeping.

Question 16

First backup, what is the minimum to be serious

Accepted Answer

1. Local: let OneDrive or Drive back up your documents. Not a full backup but it is your safety net for accidental edits and deletes.
2. Second medium: an external drive for monthly full-laptop backup, or a NAS at home or office for automatic backup. Do not leave it permanently connected, ransomware will take both.
3. Offsite: one copy outside your building or in a separate cloud. For sole traders Backblaze or iDrive in the background is fine; for team-level you want a dedicated tool like Veeam or M365 backup (Acronis, Datto).
4. Each month, test that you can recover a random file from the backup. An untested backup is an assumption, not insurance.
5. Do not store backup-system passwords only inside the backup system itself. Same as leaving a spare key inside a locked house.

When to bring us in: 
If you create more than a handful of customer files per day or touch financial or medical data, you are past DIY backups. RPO and RTO targets, encryption at rest, immutable storage, that warrants a real tool and a process.

Question 17

First password manager for a team of five

Accepted Answer

1. Pick the team tier (1Password Business, Bitwarden Teams). Free versions lack shared vault folders, which you need as soon as more than one person needs the same login.
2. Create a shared vault for "Company-general" and separate vaults per team. Personal vaults stay personal and are not visible to admins.
3. One-time import passwords from browsers (Chrome, Edge, Safari). Then disable the browser password store, otherwise you have two sources drifting apart.
4. Require MFA on the password manager account itself. Otherwise the whole plan is a single point of failure behind a reusable password.
5. Write a half page about what goes in (all work passwords, yes including the wifi printer code), what does not (client MFA seeds), and what happens at offboarding.

When to bring us in: 
If you already have personal vaults, shared vaults, and SSO mixed up and you no longer know who can reach what, a half-day cleanup is worth it. Nothing bigger.

Question 18

Rolling out MFA without half the team panicking

Accepted Answer

1. Communicate two weeks ahead what MFA is, why you are doing it, and what it means in daily life (one extra tap per login on a new device). No jargon.
2. Pick one app as the default. Microsoft Authenticator or Google Authenticator. Not "use whatever", or you will see five different apps in support tickets.
3. Roll out per group, not the whole company at once. Start with IT-savvy colleagues on a Friday, the weekend smooths it out. Monday the second group, Wednesday the rest.
4. Build a backup route. Recovery codes printed or stored in the password manager. People lose phones and you do not want to be the account-recovery process yourself.
5. In the first week, reserve a daily 15-minute drop-in. Half the questions resolve during that slot and you save separate support tickets.

When to bring us in: 
For a larger rollout (over twenty people) or with field or factory staff without a smartphone, it becomes custom work. Hardware tokens or SMS fallback we tailor per case.

Question 19

Just registered the company, what to set up on the IT side right away

Accepted Answer

1. Register your domain within 24 hours of registration. Otherwise someone else takes exactly your-company-name.com or .nl.
2. Put a mailbox on that domain (Microsoft 365 or Google Workspace, lowest tier). From that point on, communicate only from there, not from your gmail.
3. Open a business bank account and link it to an accounting tool. Mixing personal and business accounts equals doing year-end twice.
4. Create a password manager account and immediately store every new credential: chamber of commerce account, mail, bank, registrar, accounting. Day one is easier than migrating six months later.
5. Set up a Google Business Profile. Free, ten minutes, and visitors find you in Maps and search.

When to bring us in: 
Starting in a regulated sector (healthcare, legal, financial) brings extra requirements from day one: GDPR records, professional registration, light ISO 27001. Starter-IT is no longer optional then.

Question 20

First website as a freelancer, how minimal can it be

Accepted Answer

1. One page is enough to start. Name, one sentence about what you do, three service bullets, and an email or call button. A complex framework site with ten tabs is overkill in year one.
2. Hosting need not be drama. A simple Webflow, Carrd, Framer, or WordPress on a decent host does the job. Pick what you can maintain yourself.
3. Keep domain, mailbox and website at the same or clearly separated providers. Not three parties where you forget who does what.
4. Cookie banner only if you actually place cookies (analytics, embeds). A static one-pager needs none. Unneeded plumbing is a GDPR risk.
5. Linking a Google Business Profile to your domain raises local visibility more than any small SEO trick in the first months.

When to bring us in: 
As soon as you want a webshop, customer portal, or a form collecting personal data, you are past one-pager territory. Then a privacy statement, a data-processing agreement with your host, and proper backups become mandatory. We set that up.

Question 21

Fitting out a first meeting room without expensive AV dreams

Accepted Answer

1. One 55 to 65 inch screen or TV with an HDMI cable to the table. A small dock that takes laptop USB-C or HDMI. Done.
2. An all-in-one camera-mic (Logitech MeetUp, Poly Studio, Jabra PanaCast). One cable to the laptop, instantly better than built-in laptop mic and camera.
3. Test wifi coverage in the room. Nothing more tiring than a stuttering call because the access point is two rooms away.
4. One solid wired loop (HDMI, USB, power) along the table. Bluetooth and wireless display are nice in theory, in practice they drop pairing at the wrong moment.
5. Chairs with armrests and a good seat angle. Meeting fatigue comes as much from posture as from content.

When to bring us in: 
For a second room or a board room with significant space it goes further: ceiling microphones, dedicated amplifier, possibly a Microsoft Teams Room or Zoom Room. Worth a few hours of planning.

Question 22

Moving from a personal laptop to a work laptop

Accepted Answer

1. Put your work files in OneDrive or Drive on the old laptop first. Wait until everything is uploaded before moving anything. Cloud icon with check is done, cloud icon with arrow is in progress.
2. On the new laptop sign in with your work account. Files come back automatically, but in "files on demand" mode, fully available only when opened.
3. Browser bookmarks and passwords via the password manager to the new machine, not via an exported CSV sitting in your downloads folder.
4. Reinstalling software is a good moment for a cleanup. Not everything from the old laptop deserves a reinstall.
5. Wipe personal data before giving away or selling the old laptop. Full factory reset, not just delete. Encrypted disks (BitLocker, FileVault) make that wipe effective; otherwise the data is recoverable.

When to bring us in: 
If you suspect customer data lived on the old laptop, do not sell it directly. A proper wipe, and in the extreme case physical destruction of the drive, is not paranoia.

Question 23

Opening a second location, joining the IT of both

Accepted Answer

1. Identity central: use the same Microsoft 365 or Google Workspace tenant for both sites. Not one per location, or you duplicate accounts and permissions drift.
2. Files central in SharePoint or Drive. The second site does not need its own NAS; that pulls you back into VPN and sync conflicts.
3. Telephony via cloud VoIP so both sites share one number range and internal transfer just works. Classic ISDN with physical lines is wasted money in 2026.
4. Wifi with the same SSID and credentials at both locations. A colleague driving over walks in and is online.
5. One ticket channel for both. Not "site A has its own IT mailbox, site B asks the office manager". Shadow procedures form fast otherwise.

When to bring us in: 
A second site in another country brings tax and legal items outside IT scope. We cover the tech, your accountant and lawyer cover the rest. Coordinate before going live.

Question 24

First printer for a small office, buy or lease

Accepted Answer

1. Inventory what you actually print. Most small teams print less than they think. Accounting is digital, contracts go via e-sign, brochures rarely get printed.
2. Under 100 prints per month: a decent multifunction laser bought outright (HP, Brother, Canon) is cheaper than leasing. Plan for three to five years of use.
3. Above 1,000 per month: a cost-per-page calculation pays off. Lease contracts are not automatically more expensive, but they often lock in for 36 or 60 months, awkward at growth or move.
4. Set up scan-to-mail or scan-to-SharePoint. Otherwise the printer becomes an island and people end up taking phone photos of documents.
5. Put the printer on a fixed network port, not wifi. Wifi printers stutter precisely when someone needs a quick print for a client visit.

When to bring us in: 
At print volumes above 5,000 per month or special requirements (A3, colour calibration, finishing), you go beyond standard multifunction. Then comparing two to three vendor-independent quotes pays off.

Question 25

Small team to SMB, which IT transitions hit around ten people

Accepted Answer

1. Turn on device management (Microsoft Intune or Jamf for Mac, or the Google equivalent). Ten unmanaged laptops become ten different configurations.
2. Build a roles-and-rights matrix. Who has access to what. Up to this point "everyone has everything" was fine; from now on it is a risk.
3. Centralise SaaS purchasing. One or two people can buy tools, and everything goes through one accounting category. Otherwise a year on you have twelve SaaS subscriptions nobody tracks.
4. Assign an internal IT point of contact. Not necessarily a dedicated role; the most-tech-leaning office manager works, but officially. Otherwise everything keeps landing on the founder.
5. Pick an external MSP or support partner for the things outside in-house knowledge (firewall, backup, security incident response). A good contract is cheaper than firefighting at an hourly rate.

When to bring us in: 
The classic moment for a call. Ten to twenty people is exactly the zone where poorly organised IT hurts, while a few hours of planning sets the next five years right.

Question 26

I am moving from sole proprietorship (eenmanszaak) to BV, what do I sort in my IT?

Accepted Answer

1. Open a new administration in the accounting tool under the BV name. Keep the sole-prop administration separate and retain 7 years for fiscal purposes.
2. Update invoice templates with new KVK number, VAT ID, and bank account. Check e-invoicing settings (Peppol, UBL) and the payment provider (Stripe, Mollie) for the new entity.
3. Migrate active contracts to the BV where possible. Some vendors require a new agreement; some allow assignment without fuss. Plan this before the cut-over date, not after.
4. Domains, hosting, and SaaS accounts: switch owner / billing address to the BV. M365 and Google Workspace tenants can usually stay; license billing is tied to the tenant setting.

When to bring us in: 
The fiscal and legal conversion (silent or noisy contribution) is not DIY work. Bring in your accountant and possibly a notary early, even if IT looks simple.

Question 27

When is it time to hire an accountant?

Accepted Answer

1. First signal: you doubt your VAT return and you Google for it. An accountant saves the mistake and the back-tax.
2. Second signal: you hire staff or trade internationally. Payroll tax, international VAT, and collective-agreement application are not DIY work.
3. Third signal: you move from sole prop to BV, or an investor appears. Then you need a compilation or review report.
4. Split internally: daily bookkeeping fits Moneybird, Yuki or Exact. Outsource filings and the annual report; that is the common SMB split.

When to bring us in: 
On a Belastingdienst audit or a fiscal-legal dispute: stop DIY, even if you did everything yourself until that moment. An accountant or tax advisor almost always pays for themselves in that scenario.

Question 28

At what headcount should I invest in MDM?

Accepted Answer

1. Judge by risk too, not headcount alone. If a lost laptop touches customer data, MDM is sensible at 2 staff, not only at 10.
2. Microsoft 365 Business Premium includes Intune. For most SMBs, that is the cheapest route, no extra license needed.
3. Apple-only workplaces: look at Jamf Now, Mosyle, or Apple Business Manager + Intune. A few Macs run fine on Apple Business Manager; 10+ wants active management.
4. Start small: enrollment, screen-lock policy, encryption on, remote wipe available. Refine later with app management and compliance policies.

When to bring us in: 
On fast growth (5 to 25 staff inside a year) deploy MDM for the growth, not after. Enrolling all laptops retroactively costs more time than setting it up upfront.

Question 29

Choosing, registering and protecting a domain name for the company

Accepted Answer

1. Check availability of the .nl and .com at the same time, and verify the name is free at the KvK and in the Benelux trademark register.
2. Register at least the .nl and the most obvious variant, for example the version with or without a dash, or the .com.
3. Put the registration in the name of the company entity, not on a personal Gmail address, or you will be stuck later during a handover.
4. Turn on auto-renewal and put the domain expiry date in the company calendar so you are not dependent on a single mailbox.
5. Store the registrar credentials in the password manager under a shared vault, not in someone's personal notes.
6. Enable domain lock and WHOIS privacy at the registrar so the domain cannot be transferred away without confirmation.

When to bring us in: 
If you have multiple domains spread across different registrars and nobody knows who manages what, Vectel can consolidate the registrations and clean up ownership.

Question 30

Cyber insurance at company start, is it worth it

Accepted Answer

1. Get at least two quotes from insurers that explicitly handle SMB cyber, and read the exclusions before you look at the premium.
2. List what the policy requires, usually MFA on all accounts, a working backup, and up-to-date endpoints.
3. Document that you meet those requirements, because at claim time you have to prove it, not promise it.
4. Check whether the policy also covers crisis response and legal support, not only financial damages.
5. Combine with your existing liability insurance, since a cyber add-on to an existing policy is sometimes cheaper than a separate one.
6. Plan an annual review, because requirements get stricter every year and your policy can quietly add exclusions.

When to bring us in: 
If the policy conditions are hard to follow, or the insurer asks for proof of security controls during a claim, Vectel can make those controls demonstrable and help with the policy choice.

Question 31

Picking an accountant who works with cloud tools

Accepted Answer

1. Talk to at least three candidates and ask concretely which tools they support, not whether they can work with the cloud.
2. Ask if they take read-only access to your accounting software, or whether they require you to send exports every month.
3. Check that the accountant has experience with your industry and size, a freelance bookkeeping job is not the same as a company with staff.
4. Make sure ownership stays with you for the account, the invoice numbering, and the customer list, not with the accountant.
5. Agree on communication channels, email or a portal, not WhatsApp or random Dropbox folders.
6. Plan a trial quarter before signing a yearly contract, that is enough to judge the way of working.

When to bring us in: 
If the accountant asks for IT changes you find questionable, for example local software or Excel-only exchange, Vectel can review whether that is reasonable.

Question 32

VAT administration in cloud tools, what to set up first

Accepted Answer

1. Pick an accounting tool that can file VAT returns directly with the Belastingdienst, that saves manual retyping and typos.
2. Set up automatic export of invoices and receipts to separate cloud storage or a local backup, in PDF form.
3. Check whether the tool can also pull in purchase receipts via email forwarding or a scan app, that cuts paperwork.
4. Verify the VAT codes for your activities, especially if you sell internationally or digitally, ask your accountant and not ChatGPT.
5. Set a fixed weekday for administration, otherwise it piles up until the end of the quarter and turns into a panic.
6. Keep payment evidence, bank-feed statements or receipts, separately from the accounting tool on your own drive.

When to bring us in: 
If your VAT return barely makes the deadline or you have doubts about VAT codes for a new service, hire a tax advisor. Vectel can clean up the tooling so that advisor produces faster work.

Question 33

Mobile data on the road, hotspot or a dedicated dongle

Accepted Answer

1. Check your current plan for the included data volume, you often already have more headroom than you use.
2. Activate the hotspot function on your phone and test if your laptop runs stably for video calls, not just email.
3. Consider a separate 4G or 5G dongle or MiFi if you spend whole days on the road, that spares your phone battery.
4. Make this connection the default for the work laptop in a cafe or train, not the open network.
5. Add a back-up SIM from a second carrier if you work in regions where coverage is patchy.
6. Always switch on VPN or a work tunnel on public wifi, even if you only log in 'briefly'.

When to bring us in: 
If you work on the road structurally and the tooling around mobile access and VPN gets unmanageable, Vectel can deliver an MDM config where this is correct by default.

Question 34

Using a co-working space, how safe is the network

Accepted Answer

1. Connect over WPA2 or WPA3 with a personal password, not an open SSID, and not by approving a captive portal without reading it.
2. Set your firewall to the strictest profile on connect, and do not share folders or printers over the network.
3. Always switch on VPN for access to company resources, including for email and cloud storage.
4. Disable auto-connect for this network when you leave, otherwise the laptop reconnects next time without a conscious check.
5. Do not work on sensitive customer data on this network without a privacy screen, shoulder surfing is real.
6. If something looks suspicious or the connection is slow, ask the manager whether there is a separate guest VLAN and use that instead of the main network.

When to bring us in: 
If you have a recurring team subscription at a co-working space, Vectel can build an MDM profile that enforces the correct network and VPN settings automatically.

Question 35

Signing the first customer contract digitally the right way

Accepted Answer

1. Pick a tool that delivers qualified or advanced electronic signatures per eIDAS, advanced is usually enough for SMB work.
2. Configure the tool with your own branding and add company name and KvK number in the cover text, that looks serious to a first customer.
3. Test the entire flow on a dummy contract, signing, saving, retrieving, before you use it on a real customer.
4. Auto-save every signed version into your administration environment, not only in the tool, otherwise you are tied to that one SaaS account.
5. Write down the retention period in your internal procedure, fiscal seven years, other items typically ten, and agree it with your accountant.
6. Document who at your company is authorised to sign on behalf of the entity and which amounts or contract types go through whom.

When to bring us in: 
For large contracts or international counterparties you want a lawyer to review the signing flow. Vectel can set up the tooling and archive so the lawyer only has to look at content.

Question 36

Freelancer for a large client, they want MDM on my laptop

Accepted Answer

1. Ask the client exactly which MDM they use, what policy they apply and what they can see or wipe.
2. Decide whether you can dedicate a separate laptop to this client, that keeps your other client work and private files out of their reach.
3. Negotiate whether a container or work profile is enough instead of full MDM on the whole laptop, that is sufficient in many scenarios.
4. Get in writing what they will wipe at offboarding, only their container or the entire laptop, and how you get your own data back.
5. Bill the cost of a separate laptop, or the time to maintain two profiles, into your rate, it belongs in the engagement.
6. Note in your own processing register that this client has admin rights on a device that also touches other clients' data.

When to bring us in: 
When in doubt what a client may legally demand on a freelancer's laptop, ask a lawyer. Vectel can think along technically about separation between client environments.

Question 37

Hiring a family member, the IT implications

Accepted Answer

1. Create their own employee account on the company domain, do not 'temporarily' share your own credentials.
2. Grant rights matching the role, not admin rights by default because they are family, separation of duties applies here too.
3. Set expectations for the work phone or laptop, and whether they may also use it privately.
4. Document their role and access in the same HR mapping as other employees, no verbal agreements that get forgotten.
5. Agree in advance what happens at departure, an angry family departure is a bigger risk than a regular colleague because they know more about the business.
6. Treat the hire fiscally and legally like any other employment, a contract and correct payroll belong with it.

When to bring us in: 
If the role involves financial or customer-data access, get extra advice. Vectel can set up the access matrix and HR-IT path the same way as for other employees.

Question 38

First intern, how to handle access and a clean exit

Accepted Answer

1. Create the account with a preset expiry date matching the internship end, and put that date in the owner's calendar too.
2. Only grant access to what they need for the assignment, no broad access to customer folders or financial tools.
3. Document which devices they use, their own laptop or an issued workstation, and the rules on taking files with them.
4. Discuss at the start what they may include in their internship report, customer data is not practice material and does not belong in a report.
5. Build an offboarding step into the final day, deactivate the account or archive the mailbox, not 'we'll get to it'.
6. Ask the intern to hand over active workspaces to a permanent colleague so the work stays accessible without their account.

When to bring us in: 
If the intern needs to submit final work containing customer cases, ask for an NDA and a check on anonymisation. Vectel can set up the IT trail for internships so it runs correctly by default.

Question 39

Hire your own IT person or keep using an external partner

Accepted Answer

1. Count the hours you or a colleague currently spend on IT questions, that is the lower bound of the load an IT hire would absorb.
2. Ask an external partner for a fixed service contract quote, not ad-hoc, otherwise costs are not comparable.
3. Cost an in-house IT hire on full employer charges and workspace, not only gross salary, that gets you closer to the real all-in price.
4. Judge whether your IT questions are technical enough for a full-time hire, or whether they are scattered across disciplines.
5. Account for the fact that an in-house person also takes leave and gets sick, a one-person team is a single point of failure.
6. Consider a hybrid model, a part-time hire with external support during peaks or complex work.

When to bring us in: 
If you doubt the calculation or the external quotes are hard to compare, Vectel can give a second opinion and help compare on a like-for-like basis.

Question 40

From 1 to 5 employees, when can IT no longer be ad-hoc

Accepted Answer

1. Stop sharing personal logins, everyone gets their own account in email, accounting and project tools.
2. Create a shared place for customer files, no scattered folders on someone's own laptop or in a personal Dropbox.
3. Designate someone, internal or external, as first contact for IT questions, otherwise everything routes through you and blocks work.
4. Start with a simple onboarding checklist, you will reuse it often, also see the existing entry on onboarding routine.
5. Make sure MFA is on all accounts and the team uses a password manager, not 'we'll fix that when it goes wrong'.
6. Plan a six-monthly review, since at four or five people something changes every quarter and the tooling has to keep up.

When to bring us in: 
If at three or four employees IT questions start disrupting your work, bring in an external partner. Vectel can get the basic tooling in order so your team can carry on.

Question 41

From 5 to 15 people, RBAC and MDM become necessary

Accepted Answer

1. List which roles exist and which applications belong to each role, that is the foundation of RBAC, not 'everyone has access to everything'.
2. Pick an MDM matching your OS mix, Intune for Windows and Microsoft 365, Jamf for lots of Macs, a cross-platform tool if mixed.
3. Write the policy before you implement, screen lock after a few minutes, encryption required, untrusted apps not allowed.
4. Roll out MDM first on new devices, then on volunteers in the team, only then on everyone, that cuts complaints.
5. Tie access to roles and not to persons, then a role change is one click instead of a manual inventory.
6. Plan a quarterly review where someone checks the role split still matches the real work split.

When to bring us in: 
RBAC and MDM rollouts are risky to do alone without experience. Vectel can guide the first rollout so the policy matches your work style.

Question 42

First customer portal for the business, buy or build

Accepted Answer

1. First define what customers must be able to do, downloading documents is different from creating tickets or paying invoices.
2. Check whether your existing tools, accounting or CRM, already have a portal feature, then the data is in the right place.
3. Compare two or three SaaS portals on login security, MFA support and SSO options, not only on looks.
4. Ask comparable companies which portal they use and what they think after a year, not after a week.
5. Cost per customer per month, not only subscription but also onboarding time for every new customer.
6. Build custom only if no SaaS fits and you can maintain the portal for two years, otherwise it becomes a legacy system.

When to bring us in: 
If no SaaS fits and you are leaning toward custom, ask for a second opinion. Vectel can help pick or build a light custom layer on top of SaaS before you commit to a big project.

Question 43

First network printer for a team, no more USB stick

Accepted Answer

1. Pick a printer that explicitly supports AirPrint, Mopria and cloud printing, that saves install on every laptop and phone.
2. Hang the printer on your business network rather than on a single laptop with sharing, that breaks at first restart.
3. Enable secure or pull printing if the printer is in a shared space, otherwise contracts sit open on the output tray.
4. Create a shared printer account instead of someone's personal one, then the printer keeps working after that person leaves.
5. Set toner ordering to automatic through the supplier, otherwise you run dry on a day when printing is actually needed.
6. Plan a yearly firmware-update check, printers are often forgotten in update rounds and are a popular entry point.

When to bring us in: 
If the printer throws odd messages or goes offline without reason, Vectel can rebuild the network side and admin account so it stays calm.

Question 44

SMB IT subsidies, how to find something realistic

Accepted Answer

1. Start at rvo.nl or kvk.nl for current schemes for your sector and company size, and check the application window, which is often limited.
2. Look at SLIM if you invest in IT-related training, not at hardware purchases.
3. For hardware investments look at MIA and Vamil, those run through your tax return and require the asset to be on the Milieulijst.
4. Have your accountant or tax advisor review the conditions, because errors in the application can trigger clawback later.
5. Keep invoices and specifications of the subsidised investment per the scheme rules, often retention up to five years with proof of use.
6. Be realistic, a subsidy of a few thousand euro easily costs you two days of application and reporting work.

When to bring us in: 
If the subsidy is large enough to bring in a specialist, do it. Vectel can provide technical grounding for the application but defers to a dedicated subsidy advisor for the fiscal and legal side.

Question 45

Board change, transferring accounts to a new director

Accepted Answer

1. List all accounts where the old director is owner or admin, not only email but also DNS, hosting, banking tools and app stores.
2. Add the new director as secondary admin first, before removing the old one, otherwise you are stuck if something goes wrong mid-transfer.
3. Update owner data at the domain registrar and hosting provider with the correct KvK reference, so the company stays owner, not the person.
4. Update minutes and board-resolution documents for accountants and bank, since without formal documentation some tools refuse the change.
5. Reset passwords and rebuild password-manager access, even if the old director leaves on friendly terms, that is just good hygiene.
6. Plan a check one month later on all invoices and mail forwards, since some tools keep emailing the old person.

When to bring us in: 
In a contentious board change where the old director will not cooperate, bring in a lawyer immediately. Vectel can support a lawful transfer technically but cannot force access.

Question 46

First international customer, how to handle privacy

Accepted Answer

1. Determine whether the customer is inside or outside the EU, that changes the legal basis for data transfer entirely.
2. Update your privacy statement so it is clear that for some customers you process data outside the EU, otherwise you are not transparent under GDPR art. 13.
3. For processing outside the EU, use Standard Contractual Clauses from the European Commission, attached to the data-processing agreement.
4. Ask SaaS suppliers where data physically lives, and prefer EU regions for customers with privacy requirements.
5. Maintain a simple processing register per GDPR art. 30, useful for SMB companies to show customers too.
6. When in doubt about a specific customer or country, ask a privacy lawyer, since mistakes can cost customers regardless of fines.

When to bring us in: 
For customers in countries with separate privacy regimes, like US companies with EU data, or UK customers post-Brexit, bring in a privacy lawyer. Vectel can fix the tooling and data-location side.

Question 47

First real security incident, what to do in order

Accepted Answer

1. Isolate the suspect device or account immediately, cable out and wifi off, or account suspend, before doing anything else.
2. Change passwords on the affected account and any accounts tied to the same mailbox or phone, that is usually more than you think.
3. Document what you see, screenshots, timestamps, error messages, before you clean up, that matters later for insurer and possibly authorities.
4. Assess whether you have a GDPR notification duty toward the Autoriteit Persoonsgegevens, you report a personal-data breach within 72 hours, not 'when we finish investigating'.
5. Bring in your cyber insurer if you have one, they often want their own forensic team and that needs to go before you start cleaning up.
6. Communicate to affected customers and staff with facts, not reassurances, honesty builds trust, smooth messages break it.

When to bring us in: 
Call an incident-response partner immediately if scope is unclear or ransomware is actively encrypting. Vectel can triage and mobilise the right team, but do not wait on this step.

Question 48

Disaster recovery for a freelancer, what is realistic

Accepted Answer

1. List the absolute basics to keep working, mail access, customer files, invoicing tool and bank account.
2. Document per item how long recovery takes, that is RTO formally, but for freelancers just 'will I be working again today or tomorrow'.
3. Keep MFA backup codes in a physical place not next to the laptop, otherwise you lose your accounts when the laptop goes.
4. Store a second device offsite, for example at family, with the minimum tools to log in to the most important accounts.
5. Test once a year that you can indeed get back to work within a day, paper-only reading does not help when it actually matters.
6. Designate a stand-in, a fellow freelancer who can email your customers briefly if you are ill or unreachable.

When to bring us in: 
If your work depends on customer deadlines, seriously consider mutual stand-in arrangements with a fellow freelancer. Vectel can write a simple DR plan that matches your work.

Question 49

Acquisition due diligence, the IT side does not add up

Accepted Answer

1. Get a list of all SaaS licences with seat counts, contract terms and main-account owner, that is often an ongoing cost item.
2. Check which domains, certificates and hosting accounts exist and whether they are transferable to the new entity, some registrars require extra paperwork.
3. List whether there is customer or staff data under GDPR scope, and whether a breach was reported recently, that is often missing from financial due diligence.
4. Request admin-account credentials, including from any departed owners, otherwise you inherit accounts you cannot manage.
5. Assess hardware and network security, old switches and unpatched servers are a hidden post-acquisition cost.
6. Document all open questions as action items for the first 90 days post-close, not as reasons to walk away, that depends on scale.

When to bring us in: 
For acquisitions above a few hundred thousand euro, real technical due diligence is wise. Vectel can run such a check or translate findings into a 90-day action plan.

Question 50

Closing the business, archiving data and handing over

Accepted Answer

1. Map fiscal retention per category, AWR art. 52 requires seven years for the fiscal administration, other documents may be longer or shorter, ask your accountant.
2. Make a final export of accounting, customer files and HR data into a format that will still be readable years later, PDF or CSV rather than a SaaS database.
3. Store that export on an offline medium, external drive in a safe or with a notary, not on a SaaS where you will not have a subscription in two years.
4. Send customers a closing email with their invoice archive and explanation of how they retrieve their own data if you held it for them.
5. Run a proper offboarding for the last employees, including their personal data they need to take before the account closes.
6. Cancel SaaS subscriptions only after exports, not before, otherwise you lose data before securing it.

When to bring us in: 
When closing with open customer obligations or complex employment contracts, bring in a lawyer and accountant. Vectel can guide the technical archive and SaaS wind-down.

Question 51

Handing the business to a child or family member, the IT part

Accepted Answer

1. Start the handover at least a year ahead, the IT reorg cannot happen in a week, especially with shared accounts.
2. Give the successor secondary admin rights on all main accounts first, to practice, before the handover is final.
3. Update domain owner data, registrar, hosting, banking tools and SaaS main accounts to the new person and KvK role.
4. Convert personal links to business links, for example a private Gmail used for recovery mail replaced by a business alias.
5. Migrate password-manager access, remove the old owner only after the new owner has validated all vault access.
6. Document everything in a handover folder so the successor does not knock on your door six months later for 'what was that tool's admin again'.

When to bring us in: 
In a family handover with multiple possible successors or sensitivities, bring in a notary and mediator. Vectel can run the technical handover in parallel without affecting the personal dynamics.

Question 52

First serious website built externally, no more DIY

Accepted Answer

1. Write down up front what the website must do, only presenting, or also lead capture, e-commerce, or CRM integration.
2. Get at least three quotes with identical briefings, and watch how the parties ask questions, not only the price.
3. Insist that the site runs on CMS software you can maintain yourself or with another party later, no 'in-house platform' that locks you in.
4. Ask for reference projects a year old or older, because without maintenance sites look bad after a year, that is a good gauge.
5. Settle ownership of design, code and domain, all in your company name, not the builder's.
6. Reserve a maintenance budget of a few hundred euro a month for updates, hosting and small changes, otherwise the site looks half-finished within a year.

When to bring us in: 
If the site needs to be a serious revenue channel or integrate with multiple systems, hire a product owner. Vectel can provide technical steering or a second opinion on quotes.

Question 53

Scaling to 25 people, IT management becomes its own job

Accepted Answer

1. Estimate how many hours per week your team collectively spends on IT issues, multiplied by hourly cost that is your hidden cost item.
2. Build a service level agreement with your IT partner or internal lead, how fast they react to a ticket and what escalation looks like if they miss it.
3. Split roles across technical admin, user support and strategy, one person usually does not do all three well.
4. Standardise hardware rollout and MDM policy, otherwise every onboarding is a unique project and stays a drain on your team.
5. Start a self-service portal for recurring questions, password reset and software requests, that cuts a lot of ad-hoc questions.
6. Plan a yearly budget review with the supplier, do not silently renew, contracts may need to change as you grow.

When to bring us in: 
Past 25 employees without a dedicated IT role, damage piles up fast. Vectel can provide a service model that scales, or help with the recruitment of an in-house IT hire.

Starting and growing