A website is closer to a vehicle than a brochure. It can look the same from one month to the next while the parts underneath age, and it keeps doing its job well only if someone looks after it. Website management is that ongoing care: keeping the software updated and secure, making sure there is a backup you can restore, keeping the content accurate and checking that the site is still fast and producing leads. Our small business website design guide covers the build; this article is about what happens after launch.
At a glance
Website management is the routine work that keeps a business website safe, accurate and effective. This article covers updates, security, backups, content, speed and tracking, and how to decide who looks after each part. It is written for owners who want to know what their website needs, whether they manage it themselves or pay someone to.
How much work is involved depends partly on the platform. On a self-hosted WordPress site, the WordPress hardening guide notes that web hosts are usually responsible for the server infrastructure but not for the application you install on it, so updating WordPress, its themes and its plugins falls to you or your provider. On a fully hosted platform, more of that is handled for you, so it is worth checking exactly what your plan includes.
Software updates: the first job of website management
Updates matter because they fix security weaknesses as they are found. WordPress advises keeping up to date with the latest version, noting that older versions are not maintained with security updates and that once a fix is released, the information needed to exploit the old weakness is usually public. The Australian Cyber Security Centre’s small business cyber security handbook makes the same point more broadly, recommending that businesses apply security patches as soon as possible and turn on automatic updates where available.
A sensible approach is a regular schedule for routine updates, with urgent security fixes applied straight away. WordPress’s upgrade documentation recommends taking a backup before updating, so that you can restore the site if anything goes wrong. Leaving updates for long periods makes each one larger, and WordPress suggests upgrading in stages when a site is more than two major releases behind, so a steady rhythm is usually easier than occasional catch-ups.
Security basics that close the common gaps
Updates close weaknesses in the software, while good account security protects the way in. The ACSC handbook recommends multi-factor authentication, strong and unique passwords and passkeys where available, and the WordPress hardening guide similarly recommends strong passwords and two-step authentication for site logins. Each person should have their own login with only the access they need.
The same guide recommends deleting plugins you are not using and installing themes and plugins only from trusted sources. Every extra plugin is one more thing to keep updated. Google Search Console’s Security issues report is also worth checking, because it tells you if Google detects that your site has been hacked or is showing harmful content.
Backups you can actually restore
Even a well maintained site can fail, whether through a faulty update, a hosting problem or an attack, and a recent backup is what turns a crisis into an inconvenience. WordPress’s backup guidance suggests weekly backups for smaller sites with few changes and daily backups for busier sites, and recommends keeping at least three to five recent backups in different locations. It also notes that while most hosts back up their servers, requesting a copy can take time, so you should be able to back up and restore your own site.
A backup is only useful if it works. The ACSC handbook describes regular backups that are tested and stored separately from your main systems as one of the most effective ways to reduce the impact of an attack. Testing a restore occasionally is the step most often skipped. Online stores usually need more frequent backups, because orders change the data every day, as our guide to ecommerce website design touches on.
Keeping content accurate and useful
With the technical side in hand, the content needs the same steady attention. Opening hours, services, prices, staff, photos and contact details change over time, and outdated information quietly undermines trust. Adding recent reviews and examples of finished work also keeps the site’s proof current, which supports the kind of evidence described in our explainer on E-E-A-T.
For most small businesses these are the most frequent website tasks, so a simple way to request them keeps the site in step with the business.
Speed, health and tracking
A site can slow down over time as images, plugins and scripts accumulate, so it is worth checking speed every few months. Google’s Search Console shows how the site performs in Google Search and helps you find and fix issues, which makes it a useful monthly check.
Tracking needs the same care. Forms, phone links and checkout steps can stop recording after a site change, often without anyone noticing. Checking that conversion tracking is still working after updates protects the data you rely on, and it is the foundation for ongoing conversion rate optimisation.
Who does what
Website management usually involves three parties: the business, the host and whoever maintains the site, which may be you, a staff member or a provider. Hosting and maintenance are different services, so it helps to be clear which one you are paying for. A short written list of who handles updates, backups, security monitoring, content changes and tracking checks prevents the common situation where everyone assumes someone else is doing it.
Whatever the arrangement, the business should own the important accounts. The domain, hosting, analytics and admin logins should be registered to the business so that you keep control if you change providers. The ACSC handbook’s advice to define who is responsible for backups, and how often they are tested, is a good model for the rest of the list.
Common website management mistakes
The most common mistake is treating launch as the end of the job and leaving the site untouched for a year or more. Another is relying entirely on the host’s backups without ever testing a restore. A third is not knowing who holds the logins, which becomes a real problem the day something needs fixing urgently.
Keeping your website working for the business
Good website management is not complicated. It is a routine of updates, sound security, tested backups, current content and regular checks on speed and tracking, with a clear owner for each. Sometimes the routine shows that a site has outgrown its structure or platform, and at that point a redesign may serve the business better than more maintenance. Our website design page explains how we approach that work.
For practical help keeping your website secure and working well, contact us or email hello@thedigitalmarketingconsultants.com.au.
