Blog - Cost Plus

Why On-Site IT Support Still Matters for NYC Businesses

On site IT support in NYC: Let’s be honest, there’s no substitute for on site IT support in NYC. In a city where speed is currency, waiting hours—or even days—for in-person technical support is more than a nuisance. It’s a business risk. While remote tools have become more powerful, there are still situations where physical presence is essential. And for many New York City companies, the ability to get fast, on-site IT help remains a top priority.

Across industries, businesses are realizing that remote-only support models leave critical gaps. When a server fails, a firewall needs replacing, or a connectivity issue brings operations to a halt, there’s no substitute for a technician who can be on-site fast. Despite the trend toward virtualization, NYC businesses continue to value proximity—and for good reason.

an IT support company driving to a customer in New York City

Physical Infrastructure Still Exists—and It Breaks

Even in the cloud era, companies still rely on hardware: networking equipment, access points, workstations, and local servers. When these systems fail, remote diagnostics only go so far. On-site support ensures physical issues are addressed quickly, whether it’s a bad cable, failed power supply, or misconfigured device. For businesses with time-sensitive operations, waiting isn’t an option.

Rapid Response Builds Confidence

There’s a difference between logging a ticket and watching a technician walk through the door. For many NYC business owners, seeing problems resolved in person—without escalation delays or long waits—builds trust. It shows that their IT provider understands the pace and pressure of operating in this market.

Support That Understands the Local Landscape

New York City is a unique environment. Tight spaces, aging buildings, shared network infrastructure, and unpredictable access rules all affect how technology is deployed and maintained. Providers unfamiliar with the local landscape can struggle with logistics, causing delays and missteps. On site IT support in NYC from a team that knows the terrain can prevent small issues from turning into major outages.

Security and Compliance Often Require Physical Oversight

Certain industries—law, finance, healthcare—have compliance requirements that go beyond digital protections. Physical access controls, workstation lockdowns, and secure equipment handling often require in-person implementation. Relying solely on remote services may lead to gaps in security posture or audit readiness.

Why Proximity Matters

While many providers claim to “serve NYC,” few are positioned to actually show up quickly. Traffic, tolls, and travel logistics create real limitations for firms based far outside the city. That’s why businesses are increasingly turning to providers located just across the George Washington Bridge. For example, Cost+ provides on site it support in NYC and the surrounding boroughs with same-day on-site availability—without charging city-based rates.

When On-Site Support Makes the Difference

Hardware failures or equipment swaps
Firewall installation or replacement
Office moves or network reconfiguration
Hands-on support for executives and client-facing staff
Emergency response for outages or cyber incidents

Conclusion

Remote support will always have a role—but it’s not the whole answer. For New York City businesses, real-time, boots-on-the-ground service still matters. The right IT partner is one who can pick up the phone, connect remotely, and show up in person—when it counts.

If your business values both speed and service, explore what it means to have onsite IT support in NYC delivered from just minutes away. Visit our New York City IT services page to learn more.

cmcwplgnomg4042025-06-21T21:57:11-05:00July 14, 2025|

Executive Brief: Planning for Power Outages and Grid Instability

As extreme weather, aging infrastructure, and rising energy demands continue to strain the U.S. power grid, businesses face increasing risks of unexpected outages and rolling blackouts. For many organizations, even a short disruption can lead to significant financial losses, reputational harm, and operational chaos. This brief outlines why executives should prioritize power contingency planning, what questions to ask IT and facilities teams, and how to build a resilient business strategy in the face of grid instability. For related guidance, see our Executive Brief on backup testing and validation.

The Growing Challenge of Grid Reliability

Power reliability has become a growing concern for organizations of all sizes. According to the U.S. Department of Energy, demand for electricity is outpacing upgrades to transmission infrastructure in several regions, increasing the likelihood of grid stress during peak periods. Summer heatwaves, winter storms, wildfires, and cyberattacks have all contributed to a noticeable uptick in outages over the past five years.

For businesses, the impact can be significant: lost sales, halted production, data loss, and damaged customer trust. Yet many executives assume that power contingency planning is purely a facilities or IT responsibility, rather than a boardroom priority. Engaging your Recovery+ team early can help close this gap.

Why Executives Need to Lead

While operational teams handle day-to-day technical details, executives are ultimately responsible for ensuring the organization can meet its obligations — to customers, partners, and regulators — even during adverse events. Without top-down leadership, power contingency plans often remain incomplete, untested, or underfunded.

Leadership should focus on three core goals:

Uptime: Keep critical systems online, even if at reduced capacity.
Safety: Protect employees and customers during disruptions.
Continuity: Maintain communications, data integrity, and core operations.

What Questions to Ask Your Teams

Executives don’t need to be electrical engineers or IT architects to lead effectively. Instead, they should ask the right questions to ensure accountability and clarity:

Do we have an updated power contingency plan that includes IT, facilities, and key business functions?
Which of our systems and operations are mission-critical, and what level of backup power do they require?
Have we tested our uninterruptible power supplies (UPS) and generators within the last six months?
Do we have vendor relationships in place for emergency fuel, generator rental, or co-location if our main site is offline?
Are our backup and recovery processes resilient to a sudden outage in the middle of business hours?
Do employees know who to contact and what procedures to follow during an outage?

Simply asking these questions — and demanding clear answers — can uncover vulnerabilities and motivate proactive improvements. For help with structured policies and audits, consult our Security+ services.

Key Elements of a Resilient Strategy

Here are some specific components your team should consider as part of a robust power contingency plan:

Invest in Backup Power

At a minimum, critical systems such as servers, network equipment, and emergency lighting should be connected to UPS systems capable of bridging short outages or providing enough time to shut down gracefully. For longer outages, diesel or natural gas generators are often the best solution — but they require regular maintenance and fuel contracts to remain reliable.

Identify Tiered Priorities

Not every system needs to stay online during an outage. Work with IT and operations teams to map out which systems are truly critical, which can operate in reduced mode, and which can pause safely. This helps optimize the use of limited backup power resources. For more insight, see our Recovery+ page.

Test and Review Regularly

Even a well-designed plan can fail if not regularly tested. Conduct at least annual — and ideally quarterly — simulated outages to verify equipment, employee readiness, and communication channels. Capture lessons learned after each exercise and update plans accordingly.

Plan Beyond IT

Power planning is not just about data centers and computers. Consider HVAC for employee comfort and safety, emergency lighting, security systems, refrigeration (if applicable), and customer-facing systems such as point-of-sale. A holistic approach ensures nothing is overlooked. Partnering with Support+ can help align facilities and technology priorities.

Don’t Wait for a Crisis

Power disruptions rarely announce themselves in advance. By the time a storm hits or the grid operator issues a blackout warning, it’s often too late to react effectively. Leaders who invest in planning now not only reduce risk but also strengthen customer confidence and organizational resilience.

As the Department of Energy’s summer reliability assessment makes clear, outages are no longer rare, isolated events. They are becoming part of the business environment — and executives who treat them as such are far better positioned to maintain competitive advantage during disruption.

Final Thoughts

Power outages and grid instability may seem like operational issues, but they have strategic consequences. Executive oversight is crucial to ensure plans are comprehensive, tested, and aligned with organizational goals. By asking the right questions and insisting on accountability, business leaders can ensure their organizations remain resilient — no matter what happens to the grid.

For more insight into national power grid risks, see the U.S. Department of Energy’s 2024–2025 Reliability Assessment.

cmcwplgnomg4042025-07-10T22:41:07-05:00July 10, 2025|

How Saint Johns Companies Can Prepare for Hurricane Season With IT Disaster Recovery

For businesses in Saint Johns, Florida, hurricane season is more than just a weather forecast — it’s a critical business continuity challenge. Every year, companies risk data loss, service outages, and operational disruptions due to severe storms and flooding. If your business doesn’t have a clear IT disaster recovery plan, a single hurricane could leave you offline for days or even weeks. This article explores why IT disaster recovery is essential, how Saint Johns businesses can implement it effectively, and what steps you should take before the next storm hits.

Why Hurricane Preparedness Matters for Your IT Systems

Hurricane season in Florida officially runs from June through November, but storms can strike outside those months as well. According to the U.S. Department of Homeland Security, hurricanes can cause widespread power outages, internet disruptions, and physical damage to buildings and equipment — all of which can cripple your IT infrastructure. Without a proper disaster recovery plan, even a short outage can result in lost revenue, reputational harm, and regulatory noncompliance if customer data is exposed or inaccessible.

What Is an IT Disaster Recovery Plan?

An IT disaster recovery (DR) plan is a documented, tested strategy for restoring your critical systems, data, and operations as quickly as possible after an unplanned disruption. For Saint Johns businesses, this often includes:

Offsite and cloud-based data backups
Failover systems to keep operations running
Communication plans for employees and customers
Regular testing and updating of the DR plan

The goal of a disaster recovery plan isn’t just to “get back online” — it’s to minimize downtime and keep your business functioning during and after a disaster.

Steps Saint Johns FL Businesses Should Take Now

Preparing for hurricane season doesn’t have to be overwhelming. Here are concrete steps you can take to protect your IT systems and your business:

1. Assess Your Risks

Start with a risk assessment to identify which systems and data are most critical. Understand which hurricanes and flood zones your location falls into and consider what would happen if your office became inaccessible.

2. Implement Cloud Backups and Offsite Storage

Local backups are not enough when your entire office could be underwater or without power. Cloud-based backup solutions ensure your data is safe and accessible no matter what happens to your physical location.

3. Test Your Recovery Procedures

Having a DR plan on paper is just the beginning — you need to test it. Simulate an outage and verify that your backups, failover systems, and communication plans work as intended. This also helps your team practice their roles during a real emergency.

4. Partner With a Reliable IT Provider

Many Saint Johns businesses lack the in-house expertise to develop and maintain a robust disaster recovery plan. That’s where partnering with an IT services provider can help. At Cost+, our Saint Johns IT support and cybersecurity team helps local businesses design, implement, and manage comprehensive disaster recovery plans tailored to their needs.

Don’t Wait for the Next Storm

Hurricanes are inevitable — but downtime and data loss don’t have to be. By planning ahead and investing in the right disaster recovery strategies, your business can weather any storm with confidence. For more tips on hurricane preparedness for your employees and facilities, visit Ready.gov.

To discuss your company’s IT disaster recovery options in Saint Johns, schedule a free consultation with our team today.

cmcwplgnomg4042025-07-06T20:36:59-05:00July 6, 2025|

Understanding the Windows Firewall Config Error KB5060829 and What It Means for Your Organization

Microsoft recently acknowledged a new issue affecting Windows 11 version 24H2, where users see unexpected notifications about a firewall configuration problem. The alert, identified as the Windows Firewall config error KB5060829, has left many IT teams and end users questioning whether their systems are at risk. In this post, we’ll explain what this error means, why Microsoft advises you to ignore it for now, and how your IT operations can respond effectively without overreacting.

For the official Microsoft update on this issue, you can visit their release health page here.

What Is the Windows Firewall Config Error KB5060829?

After installing the optional June 2024 preview update for Windows 11 (KB5039302), some devices running version 24H2 began showing a warning that “Microsoft Defender Firewall is not using the recommended settings.”

This warning appears as a yellow triangle in the Windows Security app, creating the impression that firewall protections are misconfigured or disabled.

However, according to Microsoft, this is a false positive. Despite the notification, the firewall continues to enforce the expected rules and your device remains protected. In other words, the error does not indicate that your network or endpoints are exposed — it’s simply an incorrect status report generated by a bug in the latest update.

Microsoft has formally identified the bug under KB5060829 and is actively working on a fix.

Why You Shouldn’t Panic

It’s natural to assume that any firewall-related alert is cause for concern. After all, the firewall is a critical part of your system’s security posture. But in this case, Microsoft has confirmed that no action is required on your part:

“We recommend that you ignore the warning notification while we work on a resolution. The device firewall is working as expected and devices remain protected.”

This guidance is important for IT administrators and security teams to note. Attempting to manually reset firewall rules, uninstall updates, or roll back configurations may not only be unnecessary but could also lead to unintended consequences in a production environment.

How This Bug Could Affect Your Operations

Although this bug does not compromise security, it may still create operational noise and confusion:

Help desk tickets: Users who notice the warning icon may open support requests, adding to your team’s workload.
Monitoring alerts: Automated endpoint monitoring tools may report these warnings, cluttering dashboards and potentially masking real issues.
Compliance reporting: If your organization performs regular security checks, this false positive could result in inaccurate audit findings.

To mitigate these effects, communicate proactively with your teams and users. Let them know about the issue and explain that the firewall remains active and secure despite the notification.

Best Practices While Waiting for the Fix

Until Microsoft issues a formal resolution, here are a few best practices for managing the situation:

1. Stay Current on Microsoft Updates

Continue applying security and feature updates as recommended, and monitor Microsoft’s official release health page for progress on KB5060829. You can follow updates here.

2. Avoid Unnecessary Changes

Do not disable, reconfigure, or uninstall the firewall unless you have a separate business reason to do so. The firewall is still functioning and protecting your endpoints.

3. Communicate with Stakeholders

Inform end users and relevant business units that the warning can be safely ignored. This reduces unnecessary concern and support requests.

4. Monitor Your Own Security Posture

Continue monitoring network traffic and endpoint health through your existing security tools to ensure there are no unrelated incidents.

When Will It Be Fixed?

Microsoft is currently investigating and developing a resolution for the Windows Firewall config error KB5060829. At the time of writing, they have not announced a specific timeline for the fix but are expected to include it in a future cumulative update.

In the meantime, the key takeaway is that the firewall remains fully operational and no additional mitigation steps are required by IT or end users.

Lessons for IT Operations Teams

This issue is another reminder of why IT operations teams need clear processes for managing software bugs, false positives, and user communications. Here are a few lessons to take away:

Verify alerts against authoritative vendor documentation before taking corrective action.
Have a communication plan ready for end users when a widespread false positive appears.
Maintain a change control process to prevent unnecessary configuration changes in response to non-critical alerts.
Continue to prioritize patch management and avoid skipping updates out of fear of new bugs.

Proactive management and clear messaging can help maintain user trust and operational stability even when vendor bugs create temporary confusion.

Looking Ahead

The Windows Firewall config error KB5060829 is not the first — nor will it be the last — example of an unexpected software bug creating noise in your operations. But by staying informed and resisting the urge to overreact, you can protect your organization’s security posture and avoid unnecessary disruption.

We recommend bookmarking Microsoft’s release health page and monitoring it regularly for updates on this and other known issues.

For IT leaders, this is an opportunity to reinforce good practices around patching, user communication, and incident triage.

cmcwplgnomg4042025-07-06T13:00:00-05:00July 6, 2025|

AI Email Legal Risk: What Business Owners Should Consider

As businesses embrace tools like Microsoft Copilot and ChatGPT for communication, a new layer of concern has emerged—ai email legal risk. While AI tools can streamline productivity, they also introduce potential liability in areas like defamation, intellectual property, and privacy law. Business owners need to understand what’s at stake when machine-generated content becomes part of their daily operations.

What Could Go Wrong?

AI-generated emails may seem polished, but they can still include inaccuracies, biased language, or improperly reused content. If your business sends out information generated by AI without proper oversight, you may be held responsible—even if the mistake wasn’t written by a human employee. This includes statements that could be interpreted as defamatory, violate copyright laws, or disclose confidential or protected information.

Top Legal Risks to Watch

Defamation: If an AI-generated message includes false or damaging claims about a person or company, your business may be liable—even if there was no intent to harm.
Copyright Infringement: AI tools may unknowingly replicate phrases, ideas, or materials that are under copyright protection, opening you to legal action.
Data Privacy Violations: Emails that disclose personal information about employees or clients may breach regulations like GDPR, HIPAA, or the CCPA.
Misrepresentation: If AI creates inaccurate claims in marketing or sales emails, this can lead to regulatory scrutiny or legal disputes.

Real-World Examples

In one case, a law firm’s automated follow-up emails—written by AI—incorrectly implied that a client had missed a payment deadline. The client sued for defamation, claiming reputational damage. In another instance, a company using generative AI received a cease-and-desist letter after AI-created marketing content closely resembled material from a competitor’s campaign.

Best Practices for Business Leaders

1. Always Review Before Sending

Never allow AI-generated emails to be sent without human review. Designate responsible team members to edit and approve content—especially anything external-facing.

2. Train Your Team on Risk Awareness

Ensure employees understand the limitations of AI. Conduct training to help staff identify red flags, including misleading statements, confidential data, or legal gray areas.

3. Keep Records of AI Outputs

Maintain an archive of AI prompts and generated content. If legal issues arise, you’ll want a full audit trail to demonstrate your review process and intent.

4. Disclose When Appropriate

In certain industries, it may be necessary—or simply good practice—to disclose when content is AI-assisted. This can build trust with clients and reduce risk.

5. Avoid Using AI for Sensitive Topics

Do not rely on AI tools to draft emails involving legal, financial, HR, or regulatory content. These areas carry too much nuance and liability to automate without oversight.

Helpful Resource

For a legal perspective on these risks, this article from Keystone Law provides a valuable overview of AI liability in professional communication:
The Risks of AI for Business

Where Cost+ Can Help

Through Security+, Cost+ helps companies establish safe AI usage policies, train staff, and audit communication practices to stay ahead of emerging risks.

Bottom Line

The rise of AI in business communication introduces both opportunity and risk. By understanding and addressing ai email legal risk, your company can benefit from efficiency gains without exposing itself to costly legal exposure.

By Thomas McDonald
Vice President

cmcwplgnomg4042025-07-06T11:53:26-05:00July 6, 2025|

12 Next

Company

Consulting

About

Quick Links