Our Services

How can we help?

We provide multiple services, each solving a different part of the same problem. Learn where your organisation stands, close the gaps, and keep your people from being the weakest link.

01

Full Cybersecurity Assessment

We will perform a structured review of your business against NIST CSF 2.0 and ASD's Essentials series, the Australian Government's evolution of the Essential Eight. This will include:

  • An assessment covering all six NIST CSF 2.0 functions — Govern, Identify, Protect, Detect, Respond, Recover
  • Mapping against the ASD Essentials domains and priority phases, so you can see which areas to address first
  • A scored report that shows your overall security posture, a function-by-function breakdown of your scores, and a maturity ladder to show you how you compare against the standards
  • A prioritised action list. Using your specific gaps, we rank them by risk and impact, and provide you with actionable recommendations
  • A findings walkthrough call to explain what the results actually mean for your business
  • Our assessment is completed through a secure client portal, or guided together in a live session — whatever you're more comfortable with
Get a quote
02

Policy Documentation

Most small businesses don't have written security policies at all. Don't get us wrong, it's not because they don't matter, but because nobody's had the time to write them properly. We'll write yours for you, based on what your assessment found, not based on a generic template with your business name swapped in.

  • Incident Response Plan: who to call, what to isolate, and how to escalate
  • Acceptable Use Policy: clear rules for how your staff should use business systems and data
  • Data Handling Policy: how sensitive information is stored, shared, and protected within your environment
  • Backup & Business Continuity Plan: to give you direction and confidence in the event of an outage.
  • All policies are written specifically for your business.
  • We will deliver your policies as editable documents, with a review call to talk through anything you want changed or need to understand
Get a quote
03

Security Awareness Training

Did you know, most breaches start with people, not a piece of software? We have curated short, practical sessions that teach your staff how to actually recognise the common ways attackers try to get into your environment.

  • We offer live sessions (in person or video call), covering best practices and common issues that can lead to a breach
  • We show your staff how to actually report something that looks suspicious — and why that matters
  • Provide a reusable slide deck and handout that your business can use again for future onboarding and refreshers
  • We offer a follow-up phishing simulation, with a results summary to measure how well your staff practice what we preach
  • These sessions are designed for small teams. They are practical, easy to follow, and up-to-date with security trends.
Get a quote
04

Third-Party Risk Program

Your own security is only as strong as the weakest supplier with access to your systems or data. Most small businesses have no consistent way to check those suppliers. We help you build a simple, repeatable program so you know which vendors matter most and what to ask of them.

  • A vendor inventory: every supplier with access to your data or systems, and who in your business owns each relationship
  • Criticality tiers, so the vendors that matter most get the closest attention and the rest are not a burden
  • A due-diligence questionnaire scaled to each tier, with a plain-English guide to what good and poor answers look like
  • A checklist of security clauses to ask for in contracts, plus onboarding and offboarding steps for vendors
  • An editable vendor risk register and a review schedule, handed over in a walkthrough call so your team can run it
Get a quote
05

Ongoing Vendor Oversight

Vendor risk doesn't stay still. A supplier that was fine last year can have a breach next month. This keeps your third-party risk program running, rather than something you set up once and forget about.

  • We assist with keeping your vendor risk register current, with each vendor re-reviewed on the schedule set in your program
  • We can act as a point of contact whenever you're considering a new vendor, helping you make more informed decisions for your organisation
  • Builds directly on a completed Third-Party Risk Program: this is what keeps it accurate over time
Get a quote

Not sure which one you need?

That's exactly what the assessment is for. Start there, and we'll work out the rest together.