Who do we call to sort out our folder structure and permissions?

Permissions in most small businesses grew by exception. Somebody needed access to one folder, it was granted at whatever level was convenient, and nobody revisited it. Multiply by a decade and you get a structure where nobody can say with confidence who can see payroll.

What we do: map what access exists today, which is usually the first time anyone has seen it laid out, then rebuild it around groups rather than individuals. Groups are the key change, because then access follows the job. When someone moves from billing to operations, you change their group rather than hunting through folders.

What we need from you: decisions about who should see what. Finance, HR, client files, and anything legal usually need clear boundaries, and only you can draw them.

One thing we will raise: if a few long-serving people have accumulated access to everything, tidying that up can feel like a statement of distrust. It is not, and it is worth doing anyway. The reason is not your staff, it is that a compromised account should not be able to reach the entire business.