Cybersecurity

Essential 8 for businesses with under 200 staff: what maturity level you should actually aim for

The ACSC Essential 8 was written for federal government departments, but every business now gets asked about it. We unpack what Maturity Level 1, 2 and 3 mean in practice, what's reasonable for an SMB, and where the controls quietly turn into multi-year projects.

Talk to us about Essential 8
Microsoft 365

Microsoft 365 licence right-sizing: where most Australian businesses are quietly overpaying

Most M365 environments we audit have 10 to 25% of paid licences sitting unused or wrongly tiered. We walk through the audit we run on every new client, what to look for in your own tenant, and the questions to ask your reseller before the next renewal.

Get an M365 licensing audit
AI & Copilot

Microsoft Copilot rollout: the boring-but-important stuff that derails most pilots

Copilot rollouts that fail almost always fail on the same things: data permissions that were never tidied up, sensitivity labels that were never deployed, and adoption training that nobody bothered to run. The fun part is easy. The boring part is what we get paid to do.

Talk to us about Copilot
Cybersecurity

Business email compromise: the attack that costs Australian businesses more than ransomware

The attacks that drain bank accounts at Australian SMBs aren't the ones in the headlines. BEC (business email compromise) outscores ransomware on dollar losses every quarter the ACSC publishes a report. We cover what it looks like, why filters miss it, and the four controls that actually work.

Get a BEC posture review
Backup & DR

Why your Microsoft 365 backup is probably not what you think it is

Microsoft does not back up your tenant the way most leadership teams assume. Retention is not the same as backup. Recycle bin is not the same as recovery. We explain what Microsoft does keep, what it doesn't, and why an independent M365 backup is now a baseline expectation, not a luxury.

Talk to us about M365 backup
Cloud

Public cloud, private cloud, or both: how to pick where workloads actually belong

The "everything goes to Azure" story is over. Some workloads belong in public cloud, some belong on private infrastructure, and a surprising number belong in a hybrid that respects performance and cost. We share the simple framework we use with clients to decide.

Get a cloud placement review
Compliance

AML/CTF Tranche 2: what the new obligations mean for legal, accounting and real estate firms

Tranche 2 is bringing professional service firms inside the AML/CTF regime for the first time. We summarise what's changing, what AUSTRAC is going to expect, and the IT and information-handling controls firms need to have in place before commencement.

Talk to us about Tranche 2
Strategy

What a vCIO actually does, and when your business is too big not to have one

Virtual CIO is one of the most over-used phrases in the MSP world. We explain what we mean by it, what a quarterly business review with us actually looks like, and the size and complexity of business where it stops being optional.

Talk to us about vCIO
Microsoft 365

Teams Calling versus a separate phone system: which one actually wins?

Microsoft Teams Calling has matured to the point where, for most businesses, it's now the right answer. We walk through the comparison we make with clients between Teams Calling, 3CX and a traditional carrier voice service, and where each one still wins.

Talk to us about voice

Want a topic covered?

If there's an IT or cybersecurity question keeping you up at night, tell us. We'll either point you at something we've already written or write the answer for you.

Suggest a topic