Practical cybersecurity
for WA businesses.
A small or medium business rarely gets singled out; it gets caught in the wide net of phishing, credential theft and ransomware that hits whoever left a gap. We put the controls in place, keep them on, and document them so you can answer insurers and clients from evidence.
-
Endpoint protection - anti-virus and threat protection on every managed device
-
Multi-factor authentication and identity management
-
Operating system patching
-
Cloud backup - for email, OneDrive, SharePoint and Teams
-
Advanced email protection - against phishing and malware (needs Microsoft 365 Business Premium or Defender for Office P1)
-
Email domain protection - SPF, DKIM and DMARC set up and enforced
-
Device encryption - needs Business Premium or Windows Pro
-
Cyber awareness training - annual training and a quarterly newsletter
-
ACSC Essential Eight alignment
-
IT and cybersecurity strategy advice
-
From 25 users - a foundational incident response plan and policy maintenance
The controls Protect+ includes
Most breaches start with the basics: a weak login, an unpatched laptop, a backup nobody checked. Protect+ covers those as standard, aligned to the ACSC Essential Eight, and a health check report at each business review shows where each control stands. Security is part of Protect+, so there is no separate security contract.
What's extra: phishing simulation, a team password manager, firewall as a service, and a formal Essential Eight readiness engagement with an evidence pack. Each is quoted separately.
Insurer and client questionnaires, answered from evidence
Cyber insurers and larger clients ask about MFA, endpoint protection, patching, backups and incident response. We put those controls in place and document them, so you can answer from evidence at renewal. Each insurer sets its own requirements, so we work from your actual questionnaire.
Your insurer's renewal
We document the controls in place so you can answer each question from evidence.
A client's due diligence or a tender
Where a formal maturity position is needed, an Essential Eight readiness engagement produces the evidence pack.
Looking at Essential Eight?
Understand where you are and what to prioritise first.
We assess your current maturity, set a target level (Maturity Level 1 for most small businesses) and produce the evidence insurers, customers and boards ask for.
Common questions
Do we need an Essential Eight assessment first?
Not always. For managed customers we deploy the baseline controls (MFA, endpoint protection, email security, patching, backups) during onboarding. A formal Essential Eight readiness engagement is useful when an insurer, customer or tender needs a documented maturity level.
What training do staff get?
Protect+ includes annual cyber awareness training and a quarterly newsletter. Staff learn to spot and report suspicious email, and a clear reporting path means a near miss reaches us quickly. Phishing simulation is available as a bolt-on, and a learning platform as an optional add-on. Protect Enterprise includes the learning platform.
What happens if an incident occurs?
We isolate affected accounts and devices, contain the spread, preserve evidence, and work with you on customer and regulator notifications where required. If the incident warrants it, we coordinate with your insurer or a specialist forensics firm. Incident response is billed at our schedule of rates during business hours, and at after-hours rates outside them. From 25 users, Protect+ includes a foundational incident response plan, agreed up front so the decisions are made before you need them.
Will this help with cyber insurance renewals?
Yes. Insurers ask for evidence of MFA, endpoint protection, patching, backups and admin controls. Protect+ puts those controls in place and documents them, and an Essential Eight readiness engagement produces an evidence pack structured for renewals. Each insurer sets its own requirements, so we work from your actual questionnaire.
Which controls need extra Microsoft licensing?
Advanced email protection, device management, device encryption and advanced identity controls need Microsoft 365 Business Premium, or the equivalent standalone licences (Defender for Office P1, Intune P1, Entra ID P1). We recommend the right combination when we quote, and licences are quoted separately from the Protect+ rate.
Is cybersecurity included in managed IT?
Yes. Both managed packages include the controls listed above and Essential Eight alignment. Protect Enterprise adds Microsoft's AI-powered threat protection, identity protection with sign-in and mailbox alerts, web content filtering on managed devices in the office and on the road, and application patching. It also adds Essential Eight current state against target with a gap register, a team password manager, credential breach monitoring, Microsoft 365 configuration backup and monthly vulnerability reporting. Application control and 24/7 detection and response are optional add-ons. See the pricing page for the full list.
One conversation.
No pressure.
Tell us what prompted the question: an insurer, a client or a near miss. We reply within one business day. If we are not the right fit, we will tell you.