What works at ten staff stops working at thirty
At ten people, IT often runs on goodwill. Someone knows the Wi-Fi password, the owner set up most of the accounts, laptops are bought when needed from wherever is convenient, and problems are solved by asking the most technical person in the office. It is cheap and flexible, and it mostly works because everyone knows everyone.
As the team grows, those habits create friction. New starters wait days for a login. Nobody is sure who has access to what. Laptops are all different, so each fix takes longer. The helpful person spends more time on IT than their actual job, and resents it. Security gaps that did not matter much with a few people become real risks once there are more accounts, more devices and more ways for an attacker to get in.
Make starting and leaving a process
Hiring regularly is the first pressure point. Write a starter checklist covering accounts, licences, a device, group memberships, application access, a phone number if needed and a security briefing. Write a leaver checklist covering account disabling, device return, mailbox and file handover, and removing access to every system. Both should be triggered by HR or the manager, not by someone remembering.
With a checklist and centrally managed devices, a new starter can have a ready laptop and working accounts on their first morning. A leaver can be locked out within minutes of their final meeting. Both reduce cost, frustration and risk as the business grows. They also make a good first impression on new staff, who notice when their equipment is ready and waiting rather than promised for later in the week.
Standardise and manage devices centrally
Pick standard laptop models for each type of role and buy them through a consistent channel. Enrol every device in a management system so security settings, updates and applications are applied automatically, and lost or stolen devices can be wiped remotely. This makes support faster and cheaper because technicians deal with a known, consistent set of machines.
Plan replacements on a cycle rather than when machines fail. Many businesses use a cycle of around four years for laptops, adjusted for how hard the machines are worked. Keep one or two spare, prepared laptops on hand so a failed machine or a surprise hire never leaves someone without a device, and record every device's owner and age in a single inventory. With thirty or forty laptops, replacing a quarter of them each year smooths spending and avoids the whole fleet ageing at once.
Access, permissions and structure
With more people, access needs structure. Use groups based on roles or teams rather than granting permissions person by person. Restrict sensitive areas such as finance, HR and management files. Review who has administrator access and reduce it to the people who genuinely need it. Organise shared files into team libraries rather than one sprawling shared drive.
This is also the stage where single sign-on becomes valuable. Linking business applications to your main Microsoft or Google accounts means one account per person, consistent multi-factor sign-in and automatic removal of access when someone leaves. Fewer passwords also means fewer reset requests and less temptation for staff to reuse the same password across services, which is one of the most common ways accounts are compromised.
Security and networks need to grow too
Larger businesses are more attractive targets and face more scrutiny from customers and insurers. Move beyond the basics to email filtering, endpoint detection and response, regular security awareness training, conditional access policies, and monitored backups of cloud data. Write a short security policy and incident response plan, because larger customers will start asking for them.
The office network often needs an upgrade too. A consumer router and a couple of mesh units that worked for ten people will struggle with fifty. A business firewall, managed switches, properly placed access points and a backup internet connection become worthwhile as more people and more revenue depend on staying online.
Support and leadership
Somewhere in this range, most businesses need either an internal IT person, an outsourced provider, or a combination. The helpful staff member should be freed to do their real job. A managed IT arrangement gives you a help desk, monitoring and onsite help, with costs that scale with headcount, while a growing business with an internal IT person may use a provider to cover security, after-hours work and specialist projects.
Equally important is someone in the leadership team who owns IT decisions, holds the plan, approves spending and makes sure IT keeps pace with the business strategy. Growth goes much more smoothly when IT is planned alongside hiring and premises decisions rather than reacting to them. A short quarterly review between that leader and whoever provides support keeps priorities clear and stops small issues turning into expensive surprises.
In short
- Informal IT habits usually break somewhere around twenty to thirty staff.
- Turn starters and leavers into checklists triggered by HR.
- Standardise and centrally manage devices and permissions.
- Upgrade security, networks and support as headcount rises.