Most buildings have at least one machine that's older than the person using it. It usually still works, which is why nobody has replaced it. Here's how we deal with it.
How old is the equipment, what is still under support, and what happens to the work if any of it stops today.
What is connected, what can reach what, and whether the network still reflects how the business is actually laid out.
Whether somebody has restored from the backup on purpose and knows what came back.
Where multi-factor authentication is really switched on, and where it's described as mostly rolled out.
Every machine, how old it is and what depends on it, ranked by what we'd deal with first, with the reason next to each one. You keep that document whatever you decide.
You get a written refresh schedule with a number against each year, so old equipment stops turning into emergency purchases.
Tell us what is still in service and we will tell you what we would do about it, whether or not you hire us.