TECH TUESDAY

Picture this. A valued employee gives notice. Two weeks pass. They leave on good terms. Then someone needs to log into the project management platform. Or the billing system. Or a vendor portal. And the question nobody thought to ask before their last day surfaces with uncomfortable urgency: who has the password for that? If you are a Roark client, that question does not produce anxiety. It produces appreciation for something Roark built into your environment before you ever

There is a particular kind of confidence that comes from knowing exactly who to call when something goes wrong. Not a support queue. Not a ticket number. Not a chatbot that asks you to describe your issue in three words or fewer. A person. Someone who knows your name, knows your business, and picks up the phone. Most small and medium-sized business owners have never experienced that kind of technology relationship. They experienced vendors. They experienced help desks. They e

Most small business owners did not hear about what happened on the evening of June 12th. They were not following AI industry news. They were running their businesses. But what happened that Friday night is directly relevant to every business that uses AI tools, is considering using AI tools, or employs staff who are using AI tools whether or not anyone authorized them to. At 5:21 PM ET on June 12, 2026, the U.S. Commerce Department sent a letter to Anthropic's CEO requiring t

Most small business owners will never know how close they came. The attack that could have ended their business arrived, found nothing easy to exploit, and moved on to a softer target. That outcome is not luck. It is the product of a decision made long before the attack arrived: the decision to have the right partner in place. The businesses that absorb a cyber incident and continue operating are not the ones that never get hit. They are the ones that had the right partner, t

If you receive this newsletter, you already have something that most small businesses do not: a technology partner who does not take summers off. That distinction matters more than it might appear, because the data on what happens to businesses without managed IT support during the summer months is stark, well-documented, and entirely preventable. As a Roark client, you sit outside that risk profile. But the businesses around you, your vendors, your clients and your professio

Your team was trained to spot phishing emails. They know not to click suspicious links. They understand that urgent requests for wire transfers deserve a second look. They have been through the annual security awareness module, and they passed. None of that prepared them for the phone call. Vishing (voice phishing) is among the fastest growing and least discussed threat vectors targeting small and mid-sized professional firms today. It does not arrive in an inbox. It does not

Someone on your team gave notice this morning. By Friday they will be gone. You will wish them well, collect their laptop, and move on. Unless Roark is your MSP, you will most likely forget to revoke every credential, deauthorize every device, close every application account, remove every shared inbox permission, and audit every file they touched in the last thirty days before their access window closes. That gap between what firms intend to do when an employee leaves and wha

There is a conversation happening in boardrooms, partnership meetings, and executive offices across every regulated industry, and it is long overdue. It begins with a question that sounds simple but carries considerable weight: is your firm secure, or is your firm resilient? Most business owners answer without hesitation. They point to their antivirus software, their firewall, their password policy, and their annual security training. They describe their MSP, their compliance

Passwords have been the primary mechanism for securing digital access for more than sixty years. They are also the primary mechanism by which businesses get compromised. A solution became available in 2022 when Apple, Google, and Microsoft committed to passkey support. More than one billion people are already using them. Every major platform your firm runs is ready. In a threat environment where AI is making credential theft faster and more targeted than ever, it’s a good ti

Something significant happened in the cybersecurity world earlier this month, and most small and mid-sized businesses have not yet heard about it. On April 7, 2026, Anthropic, one of the leading artificial intelligence laboratories in the world, announced a new AI model called Mythos. They also announced, in the same breath, that they would not release it to the public. That decision alone should tell you something about what this model is capable of. Anthropic described Myth

If your managed services provider changed hands in the last several years, you may have noticed something. The name on the invoice might be the same. The support portal might look familiar. But the engineer who used to pick up the phone and already know your setup before you finished your first sentence, that person may be harder to reach than they used to be. Or gone entirely. That is not a coincidence. It is the predictable outcome of what has happened to the managed servic

For years, firms believed Shadow IT was under control. Standardized systems. Locked-down devices. Approved applications. Centralized identity. It felt contained. Shadow IT has now returned, and this time it does not arrive as unauthorized software installed on a workstation. It arrives quietly, through the browser, through convenience, through curiosity. It arrives as artificial intelligence. Employees are using AI tools today. Not in theory. Not in pilot programs. In active

Most organizations believe they are protected because they have backups. Data is copied. Files are stored. Cloud data is replicated. Somewhere, there is a system that holds a version of the business in case something goes wrong. That belief creates comfort. It also creates risk. A backup is a technical function. Recovery is a business outcome. Confusing the two is one of the most common and costly mistakes leadership teams make. When an incident occurs, no one asks whether ba

Each spring, millions of Americans prepare tax returns, organize financial records, and exchange sensitive information with accountants, payroll providers, and financial advisors. It is a predictable annual cycle. Unfortunately, it is also a predictable opportunity for cybercriminals. Tax season consistently produces a surge in fraud attempts because criminals know two things. First, people are already exchanging financial information. Second, urgency and deadlines make indiv

Modern businesses depend on vendors. Cloud platforms run core systems. Payroll providers handle sensitive employee information. Accounting platforms store financial data. File sharing systems hold client documents. Managed service providers maintain infrastructure. Software companies host customer records. In many firms, dozens or even hundreds of third-party providers quietly support daily operations. This interconnected ecosystem delivers remarkable efficiency. It also crea

Does It Operates in the Open, Governed and Aligned with Your Business? AI is already embedded in the daily work of your firm. Employees use it to draft emails, summarize documents, write code, analyze data, and answer client questions. Some use sanctioned tools. Many use whatever is free and convenient. Leaders who assume their teams are not using AI are operating on hope, not evidence. This moment mirrors the early days of cloud adoption. Tools spread faster than policies. C

Cyber threats evolve every year, yet one attack method continues to cause more direct financial loss to small and mid-sized businesses than any other: Business Email Compromise, or BEC. It is not flashy. It does not rely on sophisticated malware. It does not require a dramatic breach. Instead, BEC exploits something far more reliable, trust. A message appears to come from a managing partner, a client, or a trusted vendor. It requests a payment change, a wire transfer, or sens

There was a time not so long ago when businesses could deploy technology, confirm it worked, and move on. Servers were installed, software was licensed, networks were configured, and the prevailing assumption was that, barring a failure, the environment would continue serving the business indefinitely. That era is over. Today’s technology environments are dynamic ecosystems. Cloud platforms evolve monthly. Security threats adapt daily. Software vendors change pricing, feature

“Shadow IT” is often described as a user behavior issue. Employees download apps. Teams adopt file sharing tools. Someone signs up for a SaaS platform with a corporate credit card. A well-meaning staff member uses an AI tool to move work along faster. IT discovers these tools months later and reacts with restrictions, warnings, or new policies. This cycle is familiar in many organizations. It is also misunderstood. Shadow IT is not primarily a user problem. It is a governance

Compliance is often mistaken for paperwork. Policies are drafted. Checklists are completed. A binder or portal fills with evidence. Leadership breathes easier, believing the organization has met its obligations. That belief is understandable. It is also incomplete. True compliance is not a document set. It is the visible outcome of disciplined operations, clear ownership, and daily decisions made with risk in mind. When regulators, auditors, insurers, or investors look closel