QLAN

QLAN Blog

Notes from the field

Practical analysis on managed IT, cybersecurity, cloud architecture, and the rest of what we actually deal with on Monday mornings.

All Articles

Readiness board of the 14 NIST SP 800-171 control families assessed for CMMC Level 2, most marked in place and three flagged as open findings
Compliance & CMMC 5 min read

CMMC Level 2 Compliance for Manufacturers: A Plain-English Readiness Guide

What CMMC requires of manufacturers in the defense supply chain, how assessments work, and the practical steps to reach Level 2 readiness.

Managed IT Services pricing breakdown for Orange County businesses
Managed IT Services 3 min read

Managed IT Cost in Orange County

What Managed IT Services cost in Orange County: per-user pricing ranges, common pricing models, what should be included, and red flags when comparing quotes.

Passkey sign-in replacing a password prompt on a business laptop
Cybersecurity 3 min read

The End of Passwords: What Passkeys Mean for Your Business

What passkeys are, why they replace passwords, what Microsoft 365 and Google Workspace already support, and the steps a small business should take now.

Convincing phishing email open in a business email inbox
Cybersecurity 3 min read

Phishing Emails Are Getting Harder to Spot

AI-written messages, researched targets, brand impersonation, and deepfake calls: why phishing is harder to spot today and how a business defends against it.

Financial services team reviewing growth metrics after an IT modernization
Case Studies 3 min read

Finance IT Case Study: Revenue Growth Through Proactive IT

How QLAN stabilized, secured, and scaled IT for a mid-sized accounting and advisory firm, and how fewer slowdowns and outages showed up in revenue.

Security engineer running Active Directory penetration tests in a lab environment
Cybersecurity 3 min read

Penetration Testing Active Directory with Kali Linux: A Comprehensive Guide

How Active Directory penetration tests work: the Kali Linux tools, the methodology from reconnaissance to domain admin, and the defenses each finding points to.

Python code running concurrently after the global interpreter lock removal
Cloud & Microsoft 365 2 min read

Python Just Grew Up: The GIL is Dead, and Everything Changes

Python 3.14 ships a free-threaded build without the Global Interpreter Lock: what changes for data and AI workloads, and why to plan the upgrade, not rush it.

Azure AI Search architecture with a search index connected to business data sources
Cloud & Microsoft 365 2 min read

QLAN's Azure AI Search Offerings

What Azure AI Search does: full-text search in 50+ languages, AI enrichment of documents and images, vector search, and how it fits into an Azure environment.

Malicious email attachment warning on a business computer
Cybersecurity 3 min read

Email Malware: Understanding the Threat and Best Practices for Protection

How malware arrives by email and ten practical defenses for a small business, from filtering and patching to MFA, attachment policy, DMARC, and tested backups.

AI assisted threat detection monitoring a business network
Cybersecurity 2 min read

Guardians of the Network: AI's Role in Safeguarding Cybersecurity

How AI is used in cybersecurity: automated threat detection, faster incident response, predictive security, and behavioral authentication, plus its limits.

Endpoint protection blocking a ransomware attempt on a business workstation
Cybersecurity 2 min read

How Sophos is Revolutionizing Ransomware Protection for Organizations

How Sophos layers ransomware protection: Intercept X with CryptoGuard, a synchronized firewall, email security, and 24/7 managed detection and response.

Social engineering attacker composing a deceptive email
Cybersecurity 3 min read

Phishing: The Social Engineer's Weapon of Choice

Email phishing, spear phishing, whaling, vishing, and smishing: how each works, the tactics they share, and how a small business trains staff to resist them.

QLAN Newsletter

Get new posts in your inbox

Practical IT and cybersecurity analysis from QLAN's engineers. No vendor pitches, no fluff.