Security built around your business

A security audit, in most cases. It checks your systems against industry standards and legal requirements and gives you a roadmap, without committing you to a full Essential Eight programme. If a contract or insurer has already named the Essential Eight, start with the assessment instead.

Not for most private businesses — it is mandatory for federal Commonwealth entities. For everyone else the requirement comes from a DISP membership, a prime contractor’s flow-down clause, a cyber insurance renewal, a tender, or your Privacy Act obligation to take reasonable steps to protect personal information.

Whichever one you are actually being asked for. Most of our clients are asked for Maturity Level Two. We look at your contracts and obligations and tell you which applies before quoting any work — chasing ML3 when your contract asks for ML1 is money better spent elsewhere.

An audit asks whether the right controls are in place. A penetration test attacks your systems the way an intruder would, and asks whether those controls actually hold up. They complement each other.

No. We work with businesses that have their own internal IT team or another provider, alongside them, and hand over the documentation at the end.

Call us on (08) 8943 0602 rather than filling in a form. The priority in an active incident is containment, evidence preservation and getting you operating again; the hardening work follows.