← Charles Tay For SME owners ·

Your office PC, one evening

I spent one evening going through my own Windows desktop. It looked fine and worked fine. It still had a missing chip fix, a clock that had never set itself, and leftovers from apps I removed long ago. Here is what to check on a small business PC.

the short version

  • Most owners don’t need a powerful PC. Cloud tools and online AI run fine on an ordinary one. Spend the money on backups and security.
  • If the PC has an Intel 13th or 14th generation chip, check that its BIOS has Intel’s fix. Mine didn’t.
  • Updated, encrypted, backed up, with little installed: that beats an expensive PC.
  • Write one page on which AI tools staff may use and what never goes into them.

what my own PC had

A desktop built in 2023, used every day, with nothing obviously wrong. None of this showed up in daily use.

  • chip

    A BIOS from January 2023

    Intel’s 13th and 14th generation desktop chips can wear out from asking for too much voltage. The fix comes in a BIOS update. Mine had never had one, so the fix was missing.

  • clock

    Time never synced

    Windows was running on the board’s own clock and had never checked the time online. Wrong times confuse logs, file syncing and some logins.

  • startup

    22 apps at every sign-in

    Game launchers, writing helpers, updaters, two antivirus programs. After the clean-up, 9.

  • leftovers

    Doors left open by apps I’d removed

    About 40 firewall openings and a few admin tasks from programs no longer installed, plus a proxy address nobody could explain. Each one is a small way in.

  • data

    No disk encryption

    Anyone who took the PC, or the drive inside it, could read every file.

what’s enough to buy

  • most owners

    Office work, accounting, Canva, online AI

    A recent Core i5 or Ryzen 5, 16 to 32 GB of memory, a 1 TB SSD. No special graphics card. ChatGPT, Copilot and Claude run in the cloud, so they need nothing extra.

  • some

    Small AI models kept in the office, transcription

    32 to 64 GB of memory and an NVIDIA graphics card with 12 to 16 GB of its own memory.

  • a few

    Video, design, 3D, AI images

    64 GB of memory and an NVIDIA card with 24 GB. This is the only group where a big graphics card pays off.

Wondering whether a spare laptop helps as a plan B? See should you keep a spare laptop →

ten checks

  • 1 · BIOS

    Update it once

    do
    Find the PC or motherboard model, get the latest BIOS from the maker’s own website, and follow the maker’s steps. Intel 13th or 14th generation chips (model numbers like i7-13700 or i5-14400) need microcode 0x12B or later.
    why
    The chip fix lives in the BIOS. Windows Update didn’t deliver it, and neither did the maker’s Windows app.
  • 2 · updates

    Automatic, and a weekly restart

    do
    Leave Windows Update and Microsoft Defender on automatic. Restart once a week.
    why
    Most attacks use flaws that already have a fix.
  • 3 · encryption

    Lock the drive

    do
    Turn on BitLocker or Device Encryption. Keep the recovery key on paper or in a password manager, not on the same PC.
    why
    A stolen PC with customer data on it is a PDPA problem, not just a lost PC.
  • 4 · accounts

    A proper password, not only a PIN

    do
    Do daily work on a standard account and keep a separate admin account for installing things. At the very least, give the account a strong password.
    why
    Anything that runs as admin can change everything.
  • 5 · clear out

    Remove what nobody uses

    do
    Uninstall trial antivirus, old updaters, game launchers and unused browser extensions. Turn off apps that start with Windows but aren’t needed.
    why
    Fewer programs, fewer ways in, and a faster start.
  • 6 · antivirus

    One is enough

    do
    Microsoft Defender is built in and enough for most small firms. Remove any second scanner.
    why
    Two scanners slow the PC down and can get in each other’s way.
  • 7 · firewall

    On, with the right network type

    do
    Keep the firewall on. Set the office network to Private and café Wi-Fi to Public.
    why
    Public tells Windows to trust nobody nearby.
  • 8 · odd settings

    Look once for things nobody set

    do
    Check for a proxy address under network settings, remote access left switched on, and firewall rules for programs no longer installed. Ask whoever set up the PC if anything looks strange.
    why
    These sit quietly for years. Mine had all three.
  • 9 · backups

    Three copies, one tested

    do
    Three copies of what matters, on two kinds of storage, one kept away from the office. Restore one file from it, once.
    why
    A backup nobody has restored is a hope. More in If it stopped tonight →
  • 10 · changes

    A restore point first, a note after

    do
    Before any big change, create a Windows restore point. Afterwards, write one line: what changed and how to undo it.
    why
    When something breaks a week later, that line saves the day.

four ai rules for the business

  • one page

    Which AI tools staff may use, and what never goes into them: NRIC numbers, customer lists, salaries, contracts.

  • test first

    Send any AI-written mailing to two of your own inboxes before it goes out. In 2026 PDPC dealt with a case where a mailing script put about 95,000 members’ email addresses in one To line. PDPC’s decision ↗

  • private files

    Use business plans of AI tools that don’t train on your data. Running AI on your own machine is for later, and only if you really need it.

  • second pair

    Someone else checks any AI-written script or setting that touches customer data.

how this was done

I didn’t click through all this by hand. Claude ran on the PC and I steered it from my Mac. It read everything first and changed nothing, then gave me a table: what it found, what to change, the risk and how to undo it. I approved each batch, it made a restore point before the first one, and it logged every change with an undo line.

The BIOS update I did myself, at the PC, from a USB stick, with the maker’s own file checked against the maker’s published checksum. Afterwards Claude ran a stability test for half an hour. No errors.

If you try something like this, keep the approvals on and use it on your own or a shared business PC, never on a staff member’s computer without telling them.

help in Singapore

what to doubt

  • This is one PC, mine. Yours will have different leftovers, and maybe none.
  • BIOS updates carry a small risk: a power cut halfway can stop a board from starting. Follow the maker’s steps, and if you’re unsure, ask the shop that built the PC.
  • Prices, schemes and their terms change. Check the official pages before you act.

Written 8 Nov 2026 from my own PC’s logs. My own view. I’m not a security specialist, and I shaped this page with Claude. Not affiliated with or endorsed by Intel, Microsoft, CSA, IMDA or PDPC.