Website tips to protect your business
Owning and operating an online marketing company which does a lot of Web-based work has taught me many lessons. An experience I was not expecting to learn is that many small businesses do not know how their hosting works. For example, what company hosts the Website and how secure is it? Where is the domain registration information and who can access it? How is site speed measured and mobile friendliness tested? Is there a regular backup system in place to reboot their site should something fail? Every business owner today, in my opinion, needs to understand the answers to these questions.
Here is a “mini-guide” as to what to ask, regardless of any coding or hosting knowledge.
Who let the Dogs into the Website?
Revelation number one for me was learning many first time clients (to my company) did not know who had admin, or editing, access to their Website, especially in CMS setups like WordPress, Joomla, and Drupal. Often, email has been set up separately from the domain hosting – you can have your host directly “run” your email, or you can use any “Web” email account for most Websites. Let’s tackle these two, related, issues.
As a business, it is critical that you know and can control everyone that accesses your Website. Depending on the size of the company, admin logins are only for business owners and development staff – that is it. No one needs admin access to add or modify content. You can set those folks up as contributors, editors, etc. I recommend using a password manager to keep access restricted. Leading managers, like LastPass, allow you to share logins with team members while never revealing the actual password – it automatically logs the person in on the page. There are many plugins for WordPress and other CMS platforms that can alert you of each admin, or any “level” account, log in. If you have an increasing number of team members contributing content, it may be worth the quality control time to be completely comfortable with all content, and contributors, published.
Email is a separate issue. In general, I recommend using services like Google Apps or Microsoft Office 365 for your email and document management needs. For a small amount, you have total control over how your email works, who can use an address, plenty of storage per address, etc. It’s not worth the bevy of issues that arise to host and administer your company email with a typical Web Host. These solutions also store your email separately from your Website and allow you to take advantage of much better security offerings.
Can your Website see the wood for the trees?
Perhaps you’ve been working with a developer that also hosts your Website or an agency that, essentially, does the same thing. Firstly, there is nothing wrong with this. I do it for my clients. Unless you have either the experience of running a business Website or the desire, it doesn’t make sense for you to spend valuable time doing it.
Regardless, you do need to have several crucial bits of information that many developers and agencies are seemingly not providing. Number one, is your Website being backed up? How often is it backed up? Where is the data? Is it on the server and a 3rd party site to the developer or agency? Do you have direct access to the backups? What is your current backup and restore plan?
Did you know that all information, which includes transactions in your database, will be missing from the time of failure to when your site recovers? Can you afford to lose a day of data – what about a week, or a month? Make sure you have a plan. Make sure you speak to the responsible party and have this worked out. If not, cover your tuckus. A well-regarded tool for site backup is CodeGuard. If you don’t have a plan yet, use something like this to get started.
CDN, or Content Delivery Networks, are a significant part of the today’s Website experience. CDN’s are designed to send your images, code, and other data, across the Web to serve your users as fast as possible. However, CDN’s route your entire Website’s traffic through their DNS servers – the servers that change the friendly name you enter, like “Google.com” into IP addresses that servers use. There is nothing wrong with this; however, you should know what CDN your Website is using. How do you access it if necessary? How can you turn it off, if needed – Website testing is one example of why you would need to do this.
Website Testing! Is this thing on?
Do you wonder if your Website is “fast enough” to be competitive? The developer says it’s quick, so it must be, right. While every developer has an array of tools, most agree that GTMetrix will give you accurate, real-time, third-party testing free. Just plug your domain in, and watch the fireworks. They even give you a breakdown of why your site is well optimized, or not.
Remember, it’s your business. You need to have control of your Website, and a plan in place if things do not go as expected. Never take for granted that a plan exists, or that you have the correct information unless you have taken the steps to ensure so.
Have any questions about this post? First, visit Google and do some fishing. If you want an independent assessment, or to ask questions, please feel free to contact me.
What Do You Do?
? I utilize online marketing to bridge the gap between businesses and their audiences in two ways, 45-minute marketing on-demand coaching sessions and goal-driven consulting projects. More information is available here.