The good news? Business Premium didn’t go up at all. The better news? There are practical steps you can take to offset the increase, and some of them are easier than you’d think.

In this article, we’ll break down what changed, what you actually get for the higher price, and the three moves that South African SMEs should make before their next renewal.

What Actually Changed

Microsoft announced these changes back in December 2025, but the new pricing landed on July 1, 2026. Here’s what shifted for the plans most SMEs use:

Business plans (with Teams)

These are the ones most South African SMEs might find themselves on:

Source: Microsoft 365 Pricing and Packaging Updates

Business Premium is the standout, no increase at all. For SMEs already running Business Premium, this is the one plan that didn’t budge.

Enterprise plans (for larger teams)

The increases range from 5% at the top end (E5) to 16% on the most affordable business tier. In rand terms, depending on the exchange rate and reseller markup, that’s roughly R10.00 – R40.00 more per user per month, negligible for one person, significant for a team of 20 or 50.

What You Actually Get for the Increase

Price increases sting less when they come with features you’d actually use. And in this case, Microsoft did add real capabilities:

For Business plans:

• +50GB email storage per mailbox (a meaningful bump for teams that live in Outlook)
• URL time of click protection (phishing protection that checks links at the moment you click them)
• Copilot Chat enhancements including inbox/calendar awareness and access to Word, Excel, and PowerPoint agents

For Enterprise plans:

• Microsoft Defender for Office 365 Plan 1 included in E3 (previously an add-on)
• Intune Remote Help, Advanced Analytics, and Plan 2 capabilities
• Security Copilot in E5

Source: Microsoft Official Announcement

Whether these features justify the increase depends entirely on whether your team uses them. If you’re on Business Basic and mostly use email and Teams, the +50GB storage is useful, but the price jump is harder to swallow. If you’re on E3 and the Defender for Office inclusion saves you from buying a separate security licence, the math looks different.

Why This Matters for South African SMEs

In South Africa, the M365 price increase lands in a specific context that global articles don’t cover.

The rand exchange factor. Microsoft’s pricing is in USD, but South African businesses pay through local CSP partners who convert at their own rates. If the rand softens against the dollar, the effective increase can be higher than the headline percentage. Between exchange rates, VAT, and reseller margins, a 12% USD increase can easily become 15 to 18% in actual rands.

Unreliable power and remote work. South African SMEs are more reliant on cloud productivity tools than many international peers because power infrastructure makes on-premise setups harder to maintain. Microsoft 365 isn’t a nice-to-have for many teams, it’s how work gets done when the lights go out. That makes licence cost increases more painful because switching isn’t a realistic short-term option.

Business Premium is the sweet spot for SA SMEs. The one plan that didn’t increase, Business Premium at $22/user, also happens to be the plan that includes the most security features (Defender, Intune, Conditional Access) under a single licence. For South African businesses looking to strengthen their security posture without adding separate security tool costs, this is worth a serious look.

How Seitfin Can Help

Price increases can be a trigger to optimise, and that’s where a proper Microsoft 365 review pays for itself.

Seitfin helps South African SMEs review their Microsoft 365 environment, identify over-licenced seats, right-size plans, and ensure you’re getting full value from the features you’re already paying for. We’re a Microsoft Partner based in Centurion, and we work with businesses across Gauteng to keep their cloud setup secure, organised, and cost-effective.

Book a free M365 licensing review — we’ll audit your tenant, identify savings, and give you a clear picture of what you’re paying for vs. what you’re using.

Frequently Asked Questions

Did Microsoft 365 prices go up in July 2026?
Yes. Microsoft increased pricing on most Business and Enterprise plans effective July 1, 2026. Business plans saw increases of 12–16%, Enterprise plans 5–13%, and Frontline plans up to 33%.

Did Microsoft 365 Business Premium go up?
No. Business Premium remained at $22.00/user/month, the only Business suite with no price increase.

How can I avoid the Microsoft 365 price increase?
Two options: run a licence audit to right-size seats, or switch from monthly to annual prepaid billing to drop the 5% monthly premium.

What new features come with the M365 price increase?
Business plans gained +50GB email storage, URL phishing protection, and enhanced Copilot Chat features. Enterprise plans gained Defender for Office 365 Plan 1 (E3), Intune capabilities, and Security Copilot (E5).

Is it worth switching from Microsoft 365 to Google Workspace because of the price increase?
Almost never worth it for the price difference alone. If your business runs on Teams, SharePoint, and Exchange, the migration cost over three years typically exceeds the cumulative price difference.

This article explains what Microsoft MFA is, why it is important, and how to set it up using the Microsoft Authenticator app.

What Is Microsoft Multi-Factor Authentication?

Microsoft Multi-Factor Authentication is a security feature that requires two or more verification methods when signing in to a Microsoft account. These methods typically include:

• Something you know – your password
• Something you have – a mobile phone or authenticator app
• Something you are – biometric verification such as a fingerprint or face recognition

Even if a password is compromised, MFA helps prevent unauthorised access by ensuring attackers cannot sign in without the second factor.

Why MFA Is Important

Implementing MFA significantly improves account security and reduces the risk of cyberattacks such as phishing, password spraying, and brute-force attacks. Key benefits include:

• Stronger protection for Microsoft 365, Azure, and business applications
• Reduced risk of data breaches
• Improved compliance with security standards and best practices
• Peace of mind for users and administrators

For organisations, MFA is one of the most effective and easiest security measures to deploy.

What You Need Before You Start

Before setting up Microsoft MFA, ensure you have the following:

• A Microsoft work or school account
• A smartphone (Android or iOS)
• Internet access
• Permission to set up MFA (enabled by your organisation’s IT administrator)

The recommended verification method is the Microsoft Authenticator app, which is free and easy to use.

Step-by-Step: Setting Up Microsoft MFA

Step 1: Install the Microsoft Authenticator App

1. On your mobile phone, open the App Store (iPhone) or Google Play Store (Android).
2. Search for Microsoft Authenticator.
3. Download and install the app.

Once installed, open the app and allow notifications when prompted. Notifications are required for approval requests.

Step 2: Sign In to Your Microsoft Account

1. Go to mysignins.microsoft.com/security-info
2. Sign in using your work or school email address and password.
3. You may be prompted to approve a sign-in request.
4. Open the Microsoft Authenticator app on your phone and approve the request by entering the number displayed on your screen.

If MFA is required, you will be prompted to begin the setup process automatically.

Step 3: Choose the Microsoft Authenticator App

1. When asked to choose a verification method, select Authenticator app.
2. Click Add or Next to continue.

Microsoft may suggest the Authenticator app as the default option because it provides the best balance of security and convenience.

Step 4: Connect the App to Your Account

1. On your computer, a QR code will appear.
2. In the Authenticator app, tap Add account.
3. Select Work or school account.
4. Scan the QR code displayed on your screen.

This links your Microsoft account to the Authenticator app.

Step 5: Approve a Test Sign-In

After scanning the QR code, Microsoft will send a test notification to your phone.

1. Check your phone for the notification.
2. Open the Authenticator app.
3. Enter the number displayed on the screen.
4. Tap Approve.

If the test is successful, MFA is now configured.

Step 6: Add a Backup Verification Method (Recommended)

To avoid being locked out, Microsoft strongly recommends adding a backup method, such as:

• A mobile phone number (SMS or call)
• A secondary authenticator app
• A hardware security key (if supported)

To add a backup method:

1. Go to Security Info.
2. Select Add method.
3. Follow the on-screen instructions.

What to Expect When Signing In

Once MFA is enabled, you will:

• Enter your password as usual
• Receive a push notification on your phone
• Approve the sign-in request in the Authenticator app

In some cases, you may be asked to enter a number shown on your screen to confirm the sign-in, adding an extra layer of protection.

Common Issues and Tips

• No notification received: Check that notifications are enabled and your phone has internet access.
• New phone: Set up MFA again on the new device before removing the old one.
• Lost phone: Contact your IT administrator immediately to reset MFA.

Keeping your contact details and backup methods up to date is essential.

Conclusion

Microsoft Multi-Factor Authentication is a simple yet powerful way to protect user accounts and organisational data. By combining passwords with an additional verification step, MFA dramatically reduces the risk of unauthorised access.

Setting up MFA using the Microsoft Authenticator app takes only a few minutes and provides long-term security benefits for both individuals and organisations. If you have not enabled MFA yet, it is highly recommended to do so as soon as possible.

Not sure if MFA is switched on across your business? Get in touch and we’ll help you check and roll it out properly.

While each service has its own dedicated page with full technical detail, this overview explains how our services fit together, and how they help small and medium‑sized businesses stay secure, productive, and ready to grow.

Managed IT Services

Our Managed IT Services provide proactive, day‑to‑day IT support that keeps your systems running smoothly without the overhead of an internal IT department.

We take care of monitoring, maintenance, updates, and user support so issues are prevented before they impact your team. This includes helpdesk support, device and user management, patching, and ongoing system health checks, all delivered in a predictable, SME‑friendly model.

For businesses in Pretoria, Centurion, and across Gauteng, our managed IT support ensures reliable technology, reduced downtime, and clear monthly costs.

Learn more about our Managed IT Services →

Server Support

Your servers are the backbone of your business, whether they’re on‑premise, cloud‑based, or part of a hybrid environment. Our Server Support for SMEs focuses on stability, security, and performance.

We assist with server setup, configuration, optimisation, security hardening, backups, and disaster recovery planning. Ongoing monitoring and maintenance help prevent outages and performance issues before they disrupt your operations.

If your business relies on servers for applications, data, or identity management, our Server Support services ensure your infrastructure remains reliable and secure.

Learn more about our Server Support services →

Cybersecurity & Compliance

Cybersecurity threats don’t only target large enterprises, SMEs across South Africa are increasingly affected by phishing, ransomware, and data breaches. Our Cybersecurity services for SMEs focus on practical, layered protection without unnecessary complexity.

We help secure your email, devices, identities, backups, and Microsoft 365 environment while aligning with POPIA best practices. From firewalls and endpoint protection to email security and security audits, we make cybersecurity clear, effective, and manageable.

For Pretoria‑based businesses, this means stronger protection, reduced risk, and confidence that your systems and data are properly safeguarded.

Learn more about our Cybersecurity services for SMEs →

Microsoft 365 Consulting

Microsoft 365 is a powerful platform, but only when it’s implemented and secured correctly. Our Microsoft 365 Consulting services help businesses move to the cloud with confidence and clarity.

We design, deploy, and optimise Microsoft 365 environments to support secure collaboration, remote work, and controlled data access. This includes tenant setup, migrations, Teams and SharePoint structure, identity security, and ongoing optimisation.

Whether you’re migrating from on‑prem servers or improving an existing tenant, our Microsoft 365 consultants ensure your environment supports productivity without introducing risk.

Learn more about Microsoft 365 Consulting →

IT Strategy & Advisory

Technology decisions have long‑term consequences. Our IT Strategy & Advisory services provide vendor‑neutral guidance to help SMEs make smart, cost‑effective decisions aligned with real business goals.

We assess your current environment, identify risks and inefficiencies, and provide clear recommendations covering infrastructure, security, cloud adoption, and future growth. This service is ideal for businesses planning upgrades, preparing for expansion, or needing clarity on their IT direction.

For growing businesses in Pretoria and beyond, our advisory services turn IT into a strategic asset rather than a guessing game.

Learn more about IT Strategy & Advisory →

Local IT Services for Pretoria‑Based Businesses

Seitfin proudly supports SMEs in Pretoria, Centurion, and across Gauteng, delivering local, practical IT services backed by real experience in South African business environments.

Whether you need fully managed IT support, cybersecurity protection, cloud consulting, or strategic IT guidance, our services are designed to scale with your business, securely and affordably.

Book a free IT consultation →

Installation failures usually aren’t random. They happen because of system conflicts, corrupted files, security software, unsupported operating systems, or misconfigured Windows services. The good news? In most cases, the fix is straightforward once you understand what’s causing the problem.

This guide breaks down why M365 setups fail, what to look out for, and how SMEs can reduce risk, plus practical steps your team can take if something does go wrong.

What Is an M365 Setup Failure?

An M365 setup failure occurs when Microsoft 365 cannot install, activate, or complete configuration on a device. This may appear as:

• The installer freezing (often at 50% or 90%)
• Error codes like 1603, 1719, 1935, or 0x80070005
• Setup cancelling or rolling back
• Office apps showing as installed but refusing to open
• “We’re getting things ready” or “Please wait” messages stuck in loops
• “Unsupported operating system” warnings
• “Install button greyed out” in the Microsoft dashboard

These failures affect productivity, licensing, onboarding, and security, especially when SMEs rely heavily on Microsoft 365 for email, Teams, documents, and authentication.

How M365 Setups Work (And Where They Break)

A Microsoft 365 install relies on several moving parts under the hood:

• The installer downloads necessary components
• Windows Installer (MSI) or Click‑to‑Run processes unpack files
• The system checks compatibility, permissions, and services
• Apps are registered, libraries updated, and permissions applied
• Licensing and activation complete the setup

If any one of these steps fails, because a service is stopped, antivirus blocks a file, Windows has corrupted registry entries, or network connection drops, the whole installation may freeze or fail.

Benefits of Understanding Why Setups Fail

Knowing the common causes helps SMEs:

• Reduce downtime
• Speed up onboarding of new staff
• Avoid costly troubleshooting
• Strengthen overall system reliability
• Make better decisions around IT support and policies

Understanding what’s normal vs. what’s a warning sign saves time and frustration.

What’s “Most Recent” in M365 Setup Failures

1) Installer conflicts & system processes blocking setup

Background Windows Installer tasks or older Office remnants can cause installation hangs or error 1603. This is especially common during upgrades or when Office wasn’t cleanly removed.

2) Network instability affecting Click‑to‑Run

Wi-Fi drops, slow connections, or firewall filtering often freeze installations, usually around 80 to 90%.

3) Security tools interfering

Antivirus and endpoint protection sometimes block:

• Setup.exe
• OfficeStreaming.exe
• Installer temp files

This leads to failure codes like 0x80070005 (access denied).

4) Unsupported OS or outdated Windows builds

Older computers running outdated versions of Windows cannot complete M365 installs.

5) Corrupted Windows services or registry entries

Especially for errors like:

• 1719 – Windows Installer service not accessible
• 1935 – assembly component installation failure

These require deeper system fixes.

What to Look Out For (Without Becoming a Technician)

These are practical warning signs SMEs should watch for:

• Install stuck at 90%: Windows Installer is likely busy or blocked.
• Repeated rollback messages: The system is undoing changes because something failed.
• “Value 3” errors in logs: These indicate critical installation errors.
• “We couldn’t install Office” loops: Probably corrupted registry or leftover files.
• Install button greyed out: License or account mismatch.
• Unsupported operating system message: You’re installing the wrong version (32-bit/64-bit or outdated Windows).

How SMEs Can Reduce Risk

• Use consistent, up-to-date Windows versions: Standardising on Windows 11 reduces compatibility issues.
• Remove old versions of Office before installing: Leftover data is one of the leading causes of failure.
• Avoid installing over Wi-Fi during business hours: Use wired connections or offline installers.
• Keep antivirus from blocking the installer: Temporarily disable or whitelist Office processes.
• Ensure accounts and licensing match: Many install failures come from using the wrong Microsoft account.

Risk and Mitigation (Practical Layers for SMEs)

1. Use the Microsoft Office Uninstall Tool: This clears old components, registry issues, and corrupted files.
2. Enable verbose logging for deep troubleshooting: This helps identify exactly where the install fails.
3. Repair Windows Installer services: Fix error 1719 or corrupted registry entries.
4. Rely on the Microsoft 365 Offline Installer: Avoid connection-related failures.
5. Repair Office installation (Quick or Online Repair): Fixes corrupted files or partial installs.
6. Check and correct system permissions: Some errors stem from AppID, CLSID, or system folder permission issues.
7. Ensure Windows Event Log service is running: Necessary for certain Office components.

If Something Happens: What To Do

If an M365 setup fails or stalls:

1. Restart the computer & retry the install: Often clears stuck installers.
2. End all setup.exe/msiexec processes: Conflicting processes block M365 setup.
3. Switch to a wired connection: Eliminates Wi-Fi drops.
4. Temporarily disable antivirus: Installers often fail silently due to blocked files.
5. Use the Office uninstall tool: Removes corrupted past installations completely.
6. Use Online Repair or the Offline Installer: Fixes deeper issues or bypasses internet-based failures.
7. Check system requirements: Outdated Windows versions must be updated first.

Frequently Asked Questions

Why does Microsoft 365 get stuck at 90%?
Windows Installer is likely busy or blocked — restart and retry.

Why does the Install button not work?
Your Microsoft 365 subscription is inactive, or you are signed in with the wrong account.

Why do I keep getting error 1603 or 1935?
Usually caused by corrupted system components or registry issues.

Can antivirus block an M365 install?
Yes, this is extremely common.

Is Office easier to install with the offline installer?
Yes. Offline installs eliminate network-based failures.

Do old versions of Office need to be removed first?
Almost always — old files frequently cause new installation errors.

How Seitfin Can Help

Microsoft 365 is powerful, but only when deployed correctly.

Seitfin helps South African SMEs avoid failed setups and downtime by providing:

• M365 installation & configuration
• License management
• Email & Teams setup
• Device preparation and standardisation
• Troubleshooting failed installs
• POPIA-aligned security configuration
• Endpoint security, backups & phishing protection

If your business relies on Microsoft 365, Seitfin ensures it’s set up properly, securely, and without disruption.

Book a free Microsoft 365 assessment →

This article explores lesser‑known Microsoft 365 capabilities, explains why they matter to small and medium businesses, and shows how using them properly can save time, reduce risk, and significantly improve day‑to‑day work.

What Microsoft 365 Really Is Today (Not Just Office Apps)

Microsoft 365 is no longer just a productivity suite; it’s an integrated business platform. It combines real-time collaboration through Teams, SharePoint, and Loop; cloud storage via OneDrive; workflow automation using Power Automate; AI assistance through tools like Microsoft Editor, Designer, and emerging Copilot features; and identity, security, and compliance controls that support modern business operations.

Many SMEs already licence these capabilities but continue using Microsoft 365 as if it were still just Outlook and Word. The gap isn’t technology; it’s awareness and configuration.

What’s “Most Recent”: Hidden and Underused Microsoft 365 Capabilities

Word: Automatic Audio Transcription

One of the most surprising features for many users is that Microsoft Word can automatically transcribe audio recordings. Meetings, interviews, and voice notes can be converted directly into editable text without third-party tools. For SMEs, this saves hours of manual notetaking and documentation, especially in client-facing or administrative roles.

Excel: Live Data Types

Excel, often seen as a static spreadsheet tool, can now pull live data without complex formulas. Built-in data types allow real-time updates for company information, geography, and financial data. This is particularly useful for finance teams and managers who rely on up-to-date figures without manual refreshes.

PowerPoint: Presenter Coach

PowerPoint also does more than display slides. Its Presenter Coach feature provides real-time feedback on pacing, clarity, tone, and filler words while rehearsing presentations. This allows sales teams, managers, and presenters to improve delivery without formal coaching or training.

Outlook: Built-In Automation

Outlook, often blamed for inbox overload, includes automation tools that many users overlook. Features like Ignore Conversation, Quick Steps, and Focused Inbox dramatically reduce email noise by automating repetitive actions and prioritising what actually matters. This alone can reclaim a surprising amount of time each week.

OneDrive & SharePoint: Version History

File recovery is another underrated area. OneDrive and SharePoint include built-in version history, allowing users to restore previous versions of files, undo accidental overwrites, and track changes. For SMEs, this prevents panic when something is overwritten and reduces dependency on ad‑hoc file recovery.

Microsoft Editor: AI Writing Assistance

Microsoft Editor quietly improves written communication across Word, Outlook, and the web by enhancing grammar, clarity, tone, and professionalism using AI. This is especially valuable for client emails, proposals, and reports, where quality communication directly influences perception and trust.

Teams: Inline Message Translation

Teams also supports inline message translation, enabling multilingual teams to collaborate more easily without leaving the platform. As SMEs increasingly work with diverse teams and international clients, this feature removes friction without introducing new tools.

OneNote: Ink-to-Text and Ink-to-Math

For note‑takers and planners, OneNote can convert handwritten notes into typed text or even mathematical formulas using Ink‑to‑Text and Ink‑to‑Math. This is particularly effective for tablet users, technical roles, and anyone who prefers handwriting.

Power Automate: No-Code Automation

Power Automate takes Microsoft 365 a step further by allowing SMEs to replace repetitive admin work with simple automation. Tasks like approval emails, file organisation, notifications, and data syncing can be handled automatically, without custom software development.

Focus Mode: Distraction-Free Work

Finally, Focus Mode in Word and OneNote removes distractions by stripping away toolbars and notifications. It supports deep work, helping users write, plan, and concentrate, something increasingly rare in busy digital environments.

What to Look Out For: Common Missed Opportunities

Many SMEs don’t struggle because Microsoft 365 lacks features, they struggle because features go unused. Businesses use Outlook without Quick Steps, store files in OneDrive without understanding version history, pay for automation but continue manual admin, rely on Teams but ignore Planner or Loop, and type everything manually instead of using dictation.

These are not technical failures. They are usage gaps, and they quietly limit productivity.

How SMEs Benefit from Using These Features Properly

When Microsoft 365 features are used as intended, SMEs benefit in several practical ways. Time is saved as automation and AI reduce repetitive tasks. Collaboration improves as Teams, SharePoint, and Loop reduce email back-and-forth and improve visibility. Errors decrease through version control, smart writing assistance, and process automation. Professionalism improves across documents, emails, and presentations without additional training. Most importantly, businesses get a far better return on the Microsoft 365 licences they already pay for.

Risk and Mitigation: Practical Layers for South African SMEs

Using more features safely requires structure. Identity and access controls, such as MFA, ensure staff sign in securely. File governance becomes important to control sharing, apply expiration dates, and manage permissions. Automation should be documented and reviewed so that workflows remain transparent and reliable. Backup awareness is critical, version history helps, but it is not the same as a full backup strategy. POPIA awareness ensures that personal and client data is stored, shared, and managed responsibly.

If Something Goes Wrong: What to Do

If a feature is misused or something breaks, early action makes the difference. Files can be restored using version history, account activity should be reviewed for unusual behaviour, problematic automation can be paused or disabled, and permissions can be reset. If there is any indication of data exposure, escalation should happen quickly. Small issues become serious only when ignored.

Frequently Asked Questions

Are these features included in standard Microsoft 365 plans?
Yes, many are already included in Business Standard and Premium.

Do we need technical skills to use them?
No, most are user‑friendly and require minimal setup.

Can too much automation cause issues?
Only if it’s unmanaged. Visibility and reviews prevent problems.

Are these features secure?
Yes, when properly configured with access controls.

Why don’t more businesses use these tools?
Most SMEs were never shown what’s possible or how to apply them practically.

How Seitfin Can Help

Microsoft 365 is powerful, when it’s configured and used properly.

Seitfin helps South African SMEs:

• Optimise Microsoft 365 usage
• Enable productivity and automation safely
• Improve collaboration without chaos
• Apply security best practices
• Align usage with POPIA requirements

If you want Microsoft 365 to actually work for your business, not just be installed, Seitfin can help you unlock its full value.

Book a free Microsoft 365 assessment →

Threat intelligence reporting shows the pressure is increasing. In January 2026, South African organisations faced an average of 2,145 cyberattacks per week (reported as a 36% year‑on‑year increase), with commentary linking the environment to ransomware activity and wider Gen AI‑related exposure risks. That does not mean every attempt succeeds, it means SMEs operate in a high‑attempt environment where the safest approach is steady habits and sensible controls, not fear.

What’s “Most Recent” in Scam Tactics Right Now

1. Impersonation Is Sharper, and It’s the Main Play

Criminals increasingly impersonate trusted brands and institutions because it works: banks, suppliers, couriers, and sometimes SARS. SARS itself keeps an updated list of scam examples (summonses, penalties, demands, audit/refund themes, and more), which shows how persistent and believable these messages can be.

Why SMEs should care: impersonation targets decisions, especially around payments and access, not “IT systems” in isolation.

2. AI Is Being Used to Make Scams Feel “Clean” and Convincing

The South African Banking Risk Information Centre (SABRIC) has warned that criminals are using AI-generated content (including WhatsApp messages) and even voice-cloned deepfakes, and cautioned that real-time deepfake audio/video may become more common.

What this means in real life: fewer obvious mistakes, more natural language, and more pressure tactics that sound credible.

3. Ransomware Remains a Business Risk (Downtime, Disruption, Recovery)

Verizon’s 2025 Data Breach Investigations Report (DBIR) reports ransomware is present in 44% of breaches, reinforcing that this is not a rare edge case. Recent threat commentary also points to ransomware activity as part of the broader environment SMEs operate in.

For SMEs: the risk is not only the “attack”, it’s the operational impact that follows, which is why preparation matters more than panic.

4. Third-Party Exposure Is Rising

Modern SMEs rely on vendors, cloud platforms, and partners. Verizon’s 2025 DBIR reports third-party involvement doubled to 30% of breaches.

Translation for SMEs: security is no longer just about your devices, it’s also about supplier interactions and shared systems.

What to Look Out For (Without Becoming Paranoid)

You don’t need to catch every scam. The practical goal is to recognise high-risk moments and apply a consistent check. Treat these as “slow down and verify” moments:

1. Anything involving money: Payments, refunds, beneficiary changes, “urgent transfer” requests.
2. Anything involving logins or access: Password resets, “verify your account”, “confirm your login”, unexpected MFA prompts.
3. Anything involving sensitive information: Banking details, IDs, OTPs, staff/customer data.
4. Any message that creates urgency or fear: “Final demand”, “legal action”, “account will be blocked”. SARS impersonation is one example of this pattern because it triggers compliance fear and deadlines.
5. Anything that bypasses your normal process: “Don’t call”, “I’m in a meeting”, “just approve it”, “use these new bank details”.

These aren’t technical red flags, they’re process red flags.

The SME-Friendly Rule That Reduces Risk the Most

Don’t verify inside the message. Verify outside the message.

In practice:

• Don’t click the link in the email/SMS/WhatsApp.
• Don’t use the number included in the message.
• Don’t confirm a payment change by replying to the same thread.

Instead:

• Open the site from a bookmark or type the address manually.
• Call a known number from your records.
• Confirm changes using a second channel (especially for payments).

This keeps business moving but adds one safety layer where it matters most: money, access, and sensitive information should always be verified.

Risk and Mitigation (Practical Layers for South African SMEs)

Cyber risk can’t be eliminated entirely, but it can be reduced and managed with controls that fit real SME operations.

1. Email & phishing protection: Reduces the number of harmful messages that reach staff and helps prevent impersonation attempts landing in inboxes.
2. Access control (MFA + sensible permissions): Credential abuse and exploited access are major entry routes in large breach datasets; tightening access reduces the blast radius if something slips through.
3. Payment controls: A simple payment rule, banking detail changes must be verified independently, prevents a large portion of invoice/payment diversion style incidents.
4. Backups + recovery readiness: Ransomware remains common; tested backups and a recovery plan protect continuity.
5. POPIA-ready incident handling: POPIA enforcement is real-world. A well-publicised case involved a R5 million administrative fine, and POPIA allows administrative fines up to R10 million, reinforcing why structured incident readiness matters.

If It Happens: What to Do (Calm, Fast, Practical)

If someone clicked, entered credentials, or actioned a suspicious request:

1. Contain quickly: Disconnect the affected device from the internet if you suspect compromise.
2. Secure access: Reset passwords (start with email), enable MFA, and check for mailbox rules/forwarding changes.
3. Protect cash flow: Review recent payments and beneficiary changes; contact the bank quickly if money or approvals were involved.
4. Escalate early: Engage professional support to assess scope and reduce downtime.
5. If personal information may be involved: Document what happened and handle it appropriately under POPIA.

Frequently Asked Questions

What are common examples of impersonation scams SMEs are seeing?
Criminals usually impersonate organisations or people you already deal with. Common examples include:

• Banks – messages about “suspicious activity”, “account verification”, or urgent approval prompts.
• Suppliers – emails advising “updated banking details” or asking for urgent payment confirmation.
• Couriers/service providers – delivery notices or invoices with links or attachments.
• Payroll/HR platforms – requests to reset passwords or confirm access.
• SARS – messages referring to audits, penalties, refunds, or legal consequences (SARS lists examples of these scam formats publicly).

The organisation changes, but the approach is consistent: urgency + authority + pressure to act quickly.

How do we stay alert without becoming paranoid?
Focus on high-impact moments, not every message. Treat anything involving money, logins/access, sensitive information, or changes to normal process as a reason to slow down and verify independently. Everything else can continue as normal.

Do we need to understand cybercrime in detail to operate safely?
No. What matters most is recognising when a message pushes urgent action or shortcuts your normal process, then verifying the information outside the message.

Why are SMEs targeted so often?
Because SMEs move quickly, rely on trust, and handle real transactions daily, and attackers exploit speed, access, and third-party connections.

What should we do if something slips through?
Act early: contain, secure access, review financial activity, and escalate to professional support. Early action limits disruption and cost.

How Seitfin Can Help

Seitfin helps South African SMEs reduce risk without overcomplicating things, by putting practical layers in place where scams typically start:

• Email & phishing protection
• Firewall & endpoint protection
• Threat detection and prevention
• POPIA support (governance + incident readiness)
• Security best practice reviews and audits

If you want to strengthen your controls without slowing down operations, contact Seitfin and ask about SME cybersecurity options for email/phishing protection, endpoint/firewall protection, monitoring, and POPIA support.

For South African small and medium-sized enterprises, compromised credentials continue to be among the leading causes of data breaches. As such, multi-factor authentication is now regarded as an essential requirement for modern business operations.

What Is MFA?

Multi‑Factor Authentication (MFA) is a security method that requires users to verify their identity using two or more factors before they can log in. These factors typically come from three categories:

Something You Know

• Password
• PIN
• Security questions

Something You Have

• Smartphone with an authenticator app
• Hardware token
• One-time passcode (OTP)

Something You Are

• Fingerprint
• Facial recognition
• Retina scan

True MFA requires two different types of factors (e.g., password + phone app), making it far stronger than just a password or two passwords.

How MFA Works

When signing in to an MFA‑protected account, the process typically looks like this:

1. Enter your password (knowledge factor).
2. Verify with a second factor.

That second factor is usually one of the following:

• A code from an authenticator app
• A fingerprint scan
• A hardware key
• An SMS code (acceptable – but less secure)

For example, when signing into Microsoft 365, the system will require your password and then prompt for a verification code from Microsoft Authenticator or your mobile number.

MFA requests additional verification only when necessary. For example:

• You sign in from a new device
• You change your password
• Your login looks unusual or risky

This keeps the experience smooth while strengthening security significantly.

Benefits of MFA

Stronger Protection Against Account Compromise

Even if attackers steal your password through phishing, malware, or credential leaks, they still cannot log in without the second factor.

Protection Against Common Attacks

MFA makes it much harder for criminals to break into your account, helping protect you from:

• Trick emails (phishing) that try to steal your login details
• Using the same password in different places, which can cause problems if one site gets hacked
• People guessing your password over and over until they get it right (brute force)
• Hackers trying lots of username and password combinations they’ve found online (credential stuffing)
• Scammers who try to fool you into sharing your information (social engineering)

Regulatory & Compliance Support

Many industries now require MFA to meet:

• Data‑protection expectations
• Payment Card Industry security requirements
• General identity and access management best practices

Safer Remote & Hybrid Work

As employees access their accounts from various devices and locations, multi-factor authentication enhances identity security in distributed settings.

How SMEs Benefit From MFA

SMEs are often targeted because attackers expect weaker security. MFA closes that gap affordably and effectively.

Protect Business Email

Most financial fraud begins with compromised inboxes.

Safeguard Cloud Services

Microsoft 365, Google Workspace, CRMs, and accounting tools become safer instantly.

Reduce Risk from Human Error

Busy teams accidentally clicking phishing links is common – but MFA stops attackers from getting in.

Low Cost, High Impact

MFA is one of the highest‑value, lowest‑cost security upgrades available.

MFA Implementation Tips

• Use authenticator apps, not SMS: SMS codes can be intercepted through SIM-swapping. Authenticator apps like Microsoft Authenticator, Google Authenticator, or Authy are much safer.
• Use biometrics or hardware keys for sensitive accounts: Finance, HR, and admin accounts should have the strongest protection.
• Consider passwordless or adaptive MFA: Modern systems can evaluate risk levels and request extra verification only when needed.
• Regularly review MFA settings: Staff leave, devices change, and authenticator apps get upgraded, keep your MFA records up to date.

Why You Should Use Microsoft for MFA

Microsoft’s ecosystem offers several advantages for SMEs:

Seamless Integration with Microsoft 365

Email, Teams, SharePoint, OneDrive, and business apps all support MFA natively.

Microsoft Authenticator Is Robust and User-Friendly

• Offline functionality
• Push notifications
• Passwordless sign-in
• Full integration with Microsoft Identity provider

Strong Security Features

• Adaptive risk-based authentication
• Device management
• Conditional access
• Built-in audit and monitoring tools

POPIA-Aligned Controls

Microsoft’s identity tools support compliant data governance.

Familiar Environment for SME Teams

Most SMEs already use Microsoft tools daily – making adoption simple.

Frequently Asked Questions

Is MFA difficult for staff to use?
No. After initial setup, it only adds a few seconds during unusual sign-ins.

Is MFA expensive?
Not at all. Most cloud platforms (including Microsoft 365) include MFA at no extra cost.

Does MFA stop phishing?
MFA prevents attackers from logging in even if a password is stolen – making phishing attempts far less effective.

Can MFA be bypassed?
While no system is perfect, MFA drastically reduces the success of most cyberattacks.

What if staff lose their phone?
Backup methods (email, alternate number, hardware key, recovery codes) make recovery simple.

Is SMS MFA safe?
Better than nothing, but authenticator apps or biometrics are strongly recommended.

How Seitfin Can Help

Seitfin helps South African SMEs strengthen identity security by implementing MFA that is:

• Practical
• Easy for staff
• POPIA‑aligned
• Integrated with Microsoft
• Supported end‑to‑end

We assist with:

• Microsoft 365 MFA setup
• Authenticator app rollout
• POPIA‑ready identity management
• Security best‑practice reviews
• Email & phishing protection
• Threat detection & prevention

If your business wants secure, simple protection that actually works, Seitfin can help you deploy MFA the right way.

One of the clearest examples of this shift is Microsoft Copilot. Rather than existing as a standalone platform, Copilot is built directly into Microsoft 365 applications such as Word, Excel, Outlook, PowerPoint and Teams. For SMEs already relying on Microsoft tools, this approach lowers the barrier to entry and places generative AI inside familiar workflows.

From Novelty to Everyday Utility

Generative AI has followed a faster adoption curve than many previous technologies. Much like the early internet, what once seemed experimental is now becoming routine. At its core, generative AI refers to systems that can create new content, text, summaries, images, or data insights, based on patterns learned from large datasets. Unlike traditional AI, which is typically rule-based and task-specific, generative AI adapts to context and produces human-like outputs.

For SMEs, this distinction matters. Smaller teams often lack the time and resources to build custom AI systems or analyse large volumes of information manually. Tools like Copilot are designed to reduce friction by helping employees summarise meetings, draft documents, analyse data, and retrieve information more quickly, without requiring advanced technical skills.

Why Copilot Is Gaining Attention Among SMEs

Microsoft Copilot’s relevance for SMEs lies less in any single feature and more in how it fits into daily work. By operating within the Microsoft 365 environment, Copilot draws on existing documents, emails, chats and meetings, surfacing information employees already have access to.

This has practical implications for small and medium businesses where institutional knowledge is often scattered across inboxes, shared folders and informal conversations. Copilot allows users to ask questions in natural language, such as summarising past discussions, locating key documents, or identifying action items from meetings. In doing so, it reduces time spent searching and re‑contextualising information.

For SMEs with lean teams, these incremental time savings can add up. Administrative tasks, drafting routine emails, compiling reports, preparing meeting notes, consume a disproportionate share of working hours. Copilot is often used to produce first drafts, summaries or outlines, leaving employees to focus on review, judgement and decision-making rather than starting from a blank page.

Productivity Without Replacing People

A common concern around AI adoption is whether automation will replace human roles. In practice, Copilot’s strongest use cases support rather than substitute human expertise. Its value is most evident in repetitive or low‑value tasks that interrupt more strategic work.

Teams: Meeting Recaps

In Teams, Copilot can generate meeting recaps when sessions are recorded and transcribed. These summaries highlight decisions, extract action items and provide follow‑up notes. For managers and project leads, this reduces manual note‑taking and improves accountability, particularly in environments with frequent meetings.

Outlook: Email Summaries

In Outlook, Copilot can summarise long email threads, surface unanswered messages and identify priorities. For employees managing high communication volumes, this helps reduce context switching without removing the need for personal judgement or tone.

Excel: Data Analysis Assistance

Inside Excel, Copilot assists with data analysis by suggesting formulas, identifying trends and generating visualisations. This allows non‑specialists to extract insights from data more confidently, while still relying on human oversight for interpretation and decisions.

Accessibility and Learning in Smaller Teams

Another area where Copilot resonates with SMEs is learning and onboarding. Smaller organisations often lack dedicated training resources, and new employees are expected to become productive quickly. Copilot can help by summarising documents, explaining context, and assisting with drafting responses that align with internal standards.

Because Copilot adapts to user prompts and context, it also functions as a learning companion. Employees can ask questions about documents, past decisions or workflows, reducing reliance on informal knowledge transfer. This is particularly useful in growing businesses where processes evolve quickly but documentation may lag behind.

Accessibility features, such as language translation, voice interaction and adaptable formatting, also play a role in supporting diverse teams and remote collaboration, areas that are increasingly relevant for SMEs operating across regions or time zones.

Security, Governance and Realistic Expectations

While Copilot lowers the barrier to AI adoption, it does not remove the need for governance. Copilot operates within Microsoft’s existing security and compliance framework, inheriting the same permission structures already in place. This means it can only surface information users are authorised to access.

However, this also means Copilot reflects the quality of the underlying environment. Disorganised Teams structures, inconsistent SharePoint permissions or outdated documents can limit the usefulness of AI-generated outputs. In this sense, Copilot amplifies both strengths and weaknesses in how information is managed.

It is also important to maintain realistic expectations. Copilot excels at accelerating first drafts, summaries and research, but AI-generated content often requires editing. Outputs may be generic, lack business nuance, or miss contextual subtleties. For client-facing communication, reporting and strategic decisions, human review remains essential.

A Practical Step Rather Than a Leap

For SMEs, Copilot represents an incremental step into AI rather than a disruptive leap. Organisations already using Microsoft 365 often find adoption easier because Copilot fits into existing habits and tools. The most successful implementations tend to focus on specific roles, such as managers, project leads or operations teams, before expanding more broadly.

AI curiosity alone rarely delivers value. What matters is aligning tools like Copilot with real operational needs, clear governance, and user understanding. Used thoughtfully, Copilot can reduce administrative overhead, improve access to information, and support better use of time, without overselling what AI can realistically deliver today.

Looking Ahead

As generative AI continues to mature, tools like Microsoft Copilot are likely to become more capable and more embedded in everyday work. For SMEs, the opportunity lies in adopting AI in a way that supports people, processes and practical outcomes rather than chasing novelty.

The conversation is shifting from “What can AI do?” to “Where does AI genuinely help us work better?” That question, more than the technology itself, will shape how SMEs benefit from AI in the years ahead.

How Seitfin Can Help

For small and medium businesses exploring AI in a practical, measured way, understanding where tools like Microsoft Copilot fit into existing IT environments is often the hardest part. Seitfin works with SMEs to assess readiness, improve governance, and identify realistic use cases, without unnecessary complexity or overselling.

If you would like to have a grounded conversation about how AI and Microsoft 365 can support your business operations, Seitfin is available to help you think it through.