Compliance
Security frameworks, made practical
I help Australian businesses understand and close their gaps against the frameworks customers, insurers and government ask about.
The Essential Eight
The Australian Signals Directorate's eight baseline mitigation strategies. Most small business uplift starts here.
- 1
Application control
- 2
Patch applications
- 3
Configure Microsoft Office macro settings
- 4
User application hardening
- 5
Restrict administrative privileges
- 6
Patch operating systems
- 7
Multi-factor authentication
- 8
Regular backups
Frameworks we support
ASD Essential Eight
Our headline offering. A gap assessment against the eight strategies, an uplift roadmap, and hands-on help to raise your maturity level (1 to 3).
Privacy Act 1988 and Notifiable Data Breaches
Breach readiness, response planning and policies so you know what to do, and who to tell, if personal information is exposed.
ISO/IEC 27001
Readiness assessments plus help with policies and risk registers ahead of formal certification.
SOC 2
Readiness support for businesses that sell to customers who ask for SOC 2 reports.
Queensland Government (IPOLA and QGISCF)
For businesses that supply or work with Queensland Government. Ask us what applies to you.
APRA CPS 234 and PCI DSS
For finance and card-handling clients. Contact us to discuss your requirements.
What "readiness and support" means
We assess, advise and help you prepare. We do not issue certifications or act as an accredited auditor. Formal certification, where you need it, comes from an accredited body, and we help you get ready for it.