So my job is a closed shop - have to be a union member to work there. Not a huge deal, I don't particularly care for the politics, but I don't give them money (since I'm a shop steward, I'm not paying any dues) and we actually have sensible policies that let us get rid of idiots without too much interference from the union.
In any case, I also was asked to join the e-board of our local (which gives me a bit of inside baseball on the politics, which is nice to be able to counteract when possible) and ends up with the union actually paying me.
All of this is preface to the actual question.... I just recently found out that we're apparently in the stone age when it comes to the computer stuff at our office. Desktops on wired network, laptops on wireless, no biggie, but there's no guest network (if you want to get on the network they give you the main wifi password, which is of course insecure as hell). That's the first thing I'm going to recommend they change. But I also found out they're not taking any backups of the data on their machines, and lo and behold, an employee that retired recently was not doing a lot of things he was supposed to be doing, and to cover his tracks, wiped his machine when he left. Well, that of course destroyed a lot of work product, and set some stuff back years. Water under the bridge at this point, and of course I found out he'd done this *after* the new business agent was hired and they set his old machine back up as a basic machine for her to work on. So recovery at this point is pretty much moot, assuming he didn't actually do a high level wipe on the machine.
To prevent this in the future, I want to help them set up a local fileshare, with a secure on site backup of their machines and a secure cloud backup offsite.
Unfortunately, I'm way out of date on anything more than basic setup. Figure a dual bay NAS, with one drive set up as the local shared disk, and the other as a backup to the shared drive and the individual machines. And then have the second drive backed up offsite to AWS, or similar service.
So I guess I'm asking for a sanity check from the folks that do this regularly and know what they're doing. Does what I'm proposing sound reasonably doable for someone with just enough IT knowledge to be dangerous, or if this is something that's better off for them to find a local IT wonk who knows their stuff and can do this on a contract basis.