Updates, antivirus, and unsupported devices

Imagine a shop owner opening the same laptop every morning. It sends invoices, prints receipts, and has a familiar security shield in the corner.

Nothing looks broken. Does that mean it is still a sensible device for handling business information?

The answer depends on more than whether it starts. You also need to know whether its software receives security fixes, whether its protection is active, and who notices when either stops working.

Last week, we practiced recognizing suspicious messages and responding to mistakes. This week, we will build some everyday habits that reduce the opportunities for trouble in the first place.

Three questions to ask about each device

Start with the equipment your business depends on most. For each item, ask:

These are separate checks. An older laptop can have antivirus running while its operating system no longer receives normal security updates. A newer laptop can still be waiting for a restart to finish installing an update.

Put the answers in the technology inventory you started in Week 1. An “unknown” is a useful follow-up task.

What an update actually does

An update changes software that is already installed. It may add features, correct a problem, or close a security weakness. A security patch is a fix for a weakness someone might exploit.

Include the operating system, browser, and business applications. Phones, routers, printers, and payment equipment have software too. Firmware is software built into equipment to help it operate. Ask the supplier who maintains it, particularly when the equipment is leased or managed for you.

Use the device's normal settings, its approved app store, your IT provider's managed process, or the manufacturer's verified website. An unexpected pop-up or email asking you to install an update deserves the same caution as last week's phishing messages. The Indian Health Service's security guidance explains patches, automatic updates, and the importance of obtaining updates from trusted vendors. IHS: Updating Your Software.

Make updates a job someone owns

“Everyone updates their own computer” can leave you with five different practices and no clear picture of what is finished.

Choose a person to confirm that updates are happening. A solo owner can do this with a short checklist. A business with several devices may ask its IT provider for a report of devices needing attention.

Enable automatic updates where appropriate and follow the approved process for business equipment. Plan time for work to be saved and devices to restart. A downloaded update may still be waiting to take effect. Microsoft's Windows instructions explicitly include restarting when prompted and using active hours to reduce inconvenient interruptions. Microsoft: Install Windows Updates.

For a critical checkout or specialist application, ask the supplier about compatibility and the recovery plan before a major change. Agree on a maintenance window, then confirm that the important business task still works afterward. A serious security warning may need attention sooner than that regular window; have your support contact assess it.

For example, an illustrative maintenance note could say: “Office manager checks the front-desk laptop after closing Tuesday. Support handles update errors. Before opening Wednesday, test booking, printing, and card-reader connectivity.”

That note tells people what to do and how to recognize a problem.

What antivirus can and cannot tell you

Malware means software intended to harm a device, steal information, or misuse access. Antivirus and related security tools help detect or block malicious files and behavior.

You may already have protection included with your operating system or business subscription. For example, Windows Security includes Microsoft Defender Antivirus. First identify what is installed and who manages it. Microsoft: Stay protected with the Windows Security app.

Ask whether protection is enabled, receiving updates, and reporting problems to someone who will act. A familiar icon alone does not answer those questions.

Antivirus cannot guarantee that every threat will be caught. It also cannot supply a missing operating-system security patch or approve an unusual payment request for you. Continue updating software and using the account and verification habits from earlier lessons. If a warning appears, follow the agreed support process instead of dismissing it so you can carry on.

What “unsupported” means for your budget

For this lesson, unsupported means the vendor no longer provides the security fixes your device or software needs under its current arrangement. It may continue running for years after that point.

Support varies by product, version, and contract. Some vendors offer limited extended security updates for eligible products. Confirm eligibility, enrollment, coverage, and the end date rather than assuming your equipment has that protection. Microsoft's lifecycle guidance describes these distinctions for its products. Microsoft: Lifecycle FAQ.

Ask the manufacturer or your IT provider to confirm the exact model and software version. “No updates available” can mean current software, but it can also mean the product has stopped receiving updates.

If something important is unsupported, assign a person and a date to an upgrade or replacement plan. Include moving applications, transferring information, and testing the replacement in the cost. If an older device must stay temporarily, have qualified support assess how to limit its exposure while you move away from it. Do not assume disconnecting one cable or buying antivirus resolves every dependency or risk.

Checking support dates before your next purchase helps you compare the useful supported life of the equipment, as well as the sticker price.

A fifteen-minute device check

Choose one everyday laptop, one phone used for work, and your router or checkout device. For each, record:

1. Who manages updates and where that person checks them.
2. Whether an update, restart, or unresolved warning needs attention.
3. Which security protection applies and who receives its alerts.
4. Whether the vendor still supports the exact model and software version.
5. The next action, its owner, and a follow-up date.

You do not need to change unfamiliar settings during this exercise. Write down what you can confirm and send specific questions to the person responsible.

Your takeaway: A working device still needs current software, active protection, and a supported path forward. Give those checks an owner.

On Wednesday, we will look at protecting phones and laptops wherever work happens, including office Wi-Fi and remote access. Follow the Small Business Learning Series.