The Afternoon Audit: A Do-It-Yourself Checkup for Your Company's Technology Health

Most business owners have a vague sense of how their technology is doing — usually shaped by whatever broke most recently. What they lack is a structured picture. This checklist changes that. Set aside three hours on a Saturday, pull up your accounts, and work through the six areas below. By the end, you will have a numeric score and a clear sense of whether your next move is a repair, a replacement, or a call for outside help.

Step 1: Inventory What You Actually Have (30 minutes)

List every software subscription, hardware device category, and service provider your business relies on. Check credit card statements and ask department leads — shadow subscriptions are nearly universal.

Red flags:

• More than two tools that do the same job
• Subscriptions nobody can explain when asked
• Software you are paying for but employees have stopped using

Score yourself: 3 points if your list is complete and duplicate-free; 2 if you found a few surprises; 1 if the surprises outnumbered the knowns.

Step 2: Follow the Money (20 minutes)

Add up your total monthly technology spend, then divide each subscription's cost by how often someone actually uses it. A $200/month tool used twice a month costs $100 per use.

Red flags:

• Annual contracts that auto-renew with no usage review
• Per-seat pricing where you are paying for seats that no longer exist
• No one who can name the owner of a given contract

Score: 3 points if every dollar maps to active use; 2 if there is modest waste; 1 if waste is significant or unmeasurable.

Step 3: Test Your Security Posture (30 minutes)

Work through the essentials: Is multi-factor authentication enabled on email, banking, and your core business systems? When was the last full backup, and — critically — has a restore ever been tested? Are departing employees removed from all systems within 24 hours?

Red flags:

• Shared passwords stored in a spreadsheet or, worse, a sticky note
• Backups that exist but have never been restored successfully
• Former employees who may still have active credentials

Score: 3 points if MFA is universal and restores are tested; 2 if most boxes are checked; 1 if you hesitated on any of these questions. Security is the one area where a low score demands immediate action regardless of anything else on this list.

Step 4: Ask the People Who Use It (20 minutes)

Informally survey three to five employees: What is the most frustrating part of your technology? What workaround have you built to get your job done?

Employee workarounds are among the most valuable diagnostic signals a business has. When staff maintain private spreadsheets because the official system is too slow, or email files to themselves because the system won't talk to itself, the official system is failing — even if it looks fine on paper.

Score: 3 points if the team's complaints are minor; 2 if there are consistent irritations; 1 if people have built entire parallel workflows around broken tools.

Step 5: Check Your Aging Curve (20 minutes)

Note the age of your core infrastructure: servers or primary workstations, your line-of-business software, and your network equipment. Technology more than seven years old, or software past its vendor's support end-of-life, carries compounding costs — downtime, security exposure, and incompatibility with modern integrations.

Score: 3 points if everything is under five years old and supported; 2 if some systems are aging but stable; 1 if any critical system is unsupported or failing regularly.

Step 6: Map Your Dependencies (20 minutes)

Identify the systems your business cannot operate without for even one day, and ask: what happens if this fails? Who fixes it, how fast, and at what cost? A business with no documented answer is one outage away from finding out the hard way.

Score: 3 points if you have documented recovery plans; 2 if you have informal answers; 1 if you have neither.

Interpreting Your Score

Add up your points across all six steps, for a maximum of 18:

• 15–18: Healthy. Your technology is managed, not just tolerated. Focus on periodic re-checks and strategic improvements.
• 10–14: Functional but fragile. Prioritize the lowest-scoring categories — most often security (Step 3) and dependencies (Step 6). These are fixable with focused effort, internally or with limited outside support.
• Below 10: Hurting. The compounding costs of waste, risk, and workarounds are likely already exceeding what a fix would cost. This is the point where engaging a technology consultant for a deeper assessment typically pays for itself quickly.

One Afternoon, Real Clarity

A self-audit will not replace professional expertise, and it is not meant to. What it does is replace anxiety and guesswork with a baseline — a factual answer to the question every owner should be able to give: is my technology helping me compete, or quietly holding me back? Repeat this exercise every six months. The score's direction matters as much as the number itself.