If we look after your systems, you will get emails from us about security. Some ask you to do something, most do not, and after a while it is easy to stop reading them. That is the outcome we most want to avoid, so here is exactly what we send and how much attention each type deserves.
Our rule is that we only send you an alert when a person is the only one who can answer the question. Anything we can check, fix or dismiss ourselves, we do, and you never hear about it.
Alerts that need you today
- "Was this you?" sign-in alerts. A sign-in to your account from an unusual location, an unfamiliar device, or two places too far apart to be the same person travelling. Only you know whether it was you. If it was not, ring us on 03 9028 4358 rather than replying, and change your password from a different device.
- Multi-factor prompts you did not trigger. Multi-factor authentication is the code or approval on your phone. If we tell you your account received approval requests you did not start, someone has your password. It still works, so nothing is lost yet, but the password has to change now.
- A mailbox rule we did not expect. Rules that forward your mail outside the business, or file incoming mail into an odd folder, are a standard attacker move. If you set it up yourself, tell us and we will note it. If you did not, we will remove it and check the account.
- A device that has stopped reporting in or is missing protection. Usually mundane, a laptop left in a cupboard or a machine that has not been switched on for weeks. We ask because we cannot tell the difference between that and a device that has been taken.
- A request to approve something. New starter access, a change to who can see what, an account we plan to disable. These are business decisions, not technical ones, so they come to you.
Alerts that are for information
- Blocked sign-in attempts. Every business mailbox on the internet is tried constantly by automated attempts. Being told that some were blocked means the protection is doing its job. It is not a sign that you are being singled out.
- Quarantined email summaries. A list of messages held back as suspicious. Worth a scan in case a genuine one is in there, but no action needed otherwise.
- Patch and update reports. A record that updates were applied. Filed, not read, is fine.
- Backup completion notices. These matter, but only in the negative. We watch for failures. You do not need to check each one.
If you would rather not receive any of the informational ones, say so and we will turn them off for you. It is better that you get three alerts a month and read all three than twenty and read none.
How to tell our alerts from a scam
Fair question, since scammers imitate exactly this kind of message. A few things hold true.
Our emails come from a yougrowit.com.au address. We will never ask for your password, in an email or on the phone. We will not send you a link to a sign-in page and ask you to enter your credentials. If a message claiming to be from us asks you to do either of those things, it is not us.
The safest habit does not require you to judge at all. If an alert asks you to act, do not use the link in it. Go to portal.yougrowit.com.au yourself, or ring 03 9028 4358 and ask whether we sent it. We will never be annoyed by that call.
What happens after you tell us
If you report a genuine problem, we work through the same sequence: secure the account, sign out the attacker's sessions, review what was accessed while they were in, check for anything left behind such as forwarding rules or added app access, and then tell you plainly what we found and what it means. If anything needs reporting beyond your business, we will help you gather the facts, though decisions about notifying anyone are yours with your own advisers.
Response targets are to a qualified engineer, and they vary by package. If something is stopping you working, the phone is always faster than an email.
Still stuck?
Log a ticket at portal.yougrowit.com.au or email support@yougrowit.com.au. If it is stopping you working right now, call 03 9028 4358.
Support hours are Monday to Friday, 8:30am to 5:30pm Melbourne time, excluding Victorian public holidays.
Related Articles
Using your own phone or laptop for work, safely
Most small businesses run on personal devices to some extent. Someone checks email on their own phone, a director works from a home laptop, a part-timer uses their own machine two days a week. That is normal and it can be done safely. The risk is not ...
How to spot a phishing email
Phishing is an email designed to get you to do one of three things: type your password into a fake page, open an attachment, or pay someone. The good ones do not look like scams. They look like a Microsoft notice, a delivery slip, a signature ...
You think you have been phished: what to do in the first ten minutes
You clicked a link, typed your password into a page that looked right, and something feels off. Maybe the page reloaded and asked again. Maybe a colleague replied to an email you never sent. This one catches everyone, including people who are good ...
Invoice fraud and payment redirection: the scam that costs the most
Of everything that goes wrong with email, this is the one that takes real money out of a small business, and often tens of thousands of dollars at once. It is not a virus and it is not clever software. It is an ordinary email that asks you to pay the ...
Fake support calls and virus warning pop-ups
Two versions of the same scam. In one, a page takes over your screen with sirens or a beeping alarm, a Windows or Apple logo, and a warning that your computer is infected and you must ring a support number now. In the other, the phone rings and a ...