Bourn Technology - New Orleans

If your cyber insurance renewal is coming up, the application is probably longer than the last one you filled out.

Each new question maps to a specific 2023 or 2024 claim that cost carriers serious money: MOVEit, Change Healthcare, and the Arup deepfake wire fraud where a finance employee wired $25 million to AI-generated executives on a video call.

The trap most business owners fall into is answering optimistically. Saying yes when the honest answer is no.

If a forensic investigation after a claim finds your environment didn't match your application, the carrier can void the policy entirely. That's called rescission, and it means you absorb the full cost of the incident yourself.

We wrote up what each new section is asking and exactly how to answer without putting your coverage at risk. Link in bio.



https://bourntech.com/cyber-insurance-renewal-why-the-application-got-longer/

If your Microsoft 365 setup is a few years old, or you inherited it from a previous IT provider, some of those settings probably haven't been touched since day one.

Microsoft has improved its defaults over the past few years, which is great for businesses starting fresh. But those improvements don't go back and fix your existing tenant automatically. Sharing links set to "anyone with the link," old inbox forwarding rules, third-party apps granted access years ago, and MFA configurations that predate newer policies all stay exactly where they were.

We put together a list of five settings worth checking, especially if your tenant is more than two or three years old. Link in the comments.



https://bourntech.com/5-microsoft-365-settings-older-tenants-should-check-now/

Small business owners, this one's worth a few minutes of your time.

If you have 10 to 50 employees, you're in the range ransomware attackers prefer. Not because you're a soft target, but because the math works out better for them than going after large enterprises or one-person shops.

A 22-person company can be researched in 40 minutes using public records, hit with credentials bought for $14, and ransomed within a week.

We walked through exactly how that attack unfolds, written from the attacker's perspective, including how they pick their target, how they get past MFA in 2025, and the five places the whole thing would have fallen apart if a few Microsoft 365 settings had been turned on.

Worth a read if you're responsible for keeping your business running.



https://bourntech.com/how-ransomware-targets-small-businesses-and-how-to-stop-it/

Ever had to chase down a former employee's logins, hunt for their laptop, and unwind a bunch of software tools nobody documented?

That mess almost always traces back to their first week on the job.

A clean offboarding should take about 90 minutes of IT time. Whether it does comes down entirely to how that person was set up when they started.

We wrote up the four onboarding shortcuts that turn every future departure into a three-week headache, plus how to fix it for the team you already have. Link in the comments.



https://bourntech.com/?p=7516

A "dream job" message can turn into a real breach faster than you'd think. The criminals behind fake LinkedIn recruiters are counting on one thing: your team moving fast and not checking. The fix is refreshingly simple, and it doesn't require turning anyone into a security expert. See the red flags every employee should know.

LinkedIn Recruitment Scams Are Targeting Your Team – Bourn Technology That friendly recruiter sliding into your team's LinkedIn messages might not be a recruiter at all. Fake job offers have become one of the slickest tricks criminals use to slip past your defenses. Here's how to shut them down before anyone clicks.

Don’t treat Microsoft OneDrive or Google Drive as a guaranteed backup.

Many people assume that if their network gets hit by ransomware, they can just log into their cloud account and restore an older version of their files.

The problem is that modern ransomware can sync encrypted files to your cloud account, overwriting clean versions and potentially targeting version history or recycle bin contents before you even realize you have been attacked.

When malicious software reaches a synced laptop, the damage does not stay on that single device.

Because your cloud drive is designed to sync changes instantly, the system automatically uploads those locked, encrypted files straight into your company cloud.

It directly overwrites your clean data.

Cloud storage connects your data, without isolating it.

To have a higher level of security, you need a separate backup system that is completely offline or locked down.

You need an isolated copy of your files that a compromised network account cannot reach, alter, or delete.

Your team's LinkedIn profiles are a target, and the scams aimed at them are getting harder to spot. 🛡️ Fake recruitment outreach sails right past the email filters most businesses rely on, because it never touches email at all. For law firms, accounting practices, and other professional services firms, the smartest defense is preparation: simple verification habits your staff follow every time. Here's how to put them in place.

LinkedIn Recruitment Scams Are Targeting Your Team – Bourn Technology That friendly recruiter sliding into your team's LinkedIn messages might not be a recruiter at all. Fake job offers have become one of the slickest tricks criminals use to slip past your defenses. Here's how to shut them down before anyone clicks.

If you run a business, an employee can easily email your client list to their personal account, whether by accident or on purpose.

Most companies just trust their staff not to do this.

But you need a technical rule that stops sensitive data from leaving your network in the first place.

If you use Microsoft 365, you can use a tool called Microsoft Purview to set up Data Loss Prevention rules.

When you turn this on, the system scans every outgoing email, Teams messages, SharePoint/OneDrive files, endpoint devices, browser activity, and Microsoft 365 Copilot prompts before processing.

If it detects sensitive information like Social Security numbers, credit card details, or specific internal company tags, it physically blocks the email.

You do not have to monitor employees manually.

Fake "recruiters" are sliding into your employees' LinkedIn messages. 🎣 A too-good-to-be-true job offer is one of the easiest ways scammers talk your staff into clicking something they shouldn't. Would your team catch it before it became a problem? We broke down exactly how these scams work, and how to stop them, on the blog.

LinkedIn Recruitment Scams Are Targeting Your Team – Bourn Technology That friendly recruiter sliding into your team's LinkedIn messages might not be a recruiter at all. Fake job offers have become one of the slickest tricks criminals use to slip past your defenses. Here's how to shut them down before anyone clicks.

Don't wait for a hardware failure to discover your weak points. Patching, backups, and device support status are the three checkpoints most businesses overlook until they wish they hadn't. A legacy debt audit trades vague worry for a specific to-do list. Fresh post on the blog covers exactly where to look first.
https://bourntech.com/2026/05/18/the-legacy-debt-audit-3-aging-risks-in-your-server-room/

The Legacy Debt Audit: 3 Aging Risks in Your Server Room – Bourn Technology The most dangerous box in your server room is usually the one nobody wants to touch. Here's how to find the three highest-risk pieces of aging tech hiding in your business before they pick a Friday afternoon to fail and turn into an emergency you didn't plan for.