Cybersecurity
Essential 8 for businesses with under 200 staff: what maturity level you should actually aim for
The ACSC Essential 8 was written for federal government departments, but every business now gets asked about it. We unpack what Maturity Level 1, 2 and 3 mean in practice, what's reasonable for an SMB, and where the controls quietly turn into multi-year projects.
Talk to us about Essential 8 →
Microsoft 365
Microsoft 365 licence right-sizing: where most Australian businesses are quietly overpaying
Most M365 environments we audit have 10 to 25% of paid licences sitting unused or wrongly tiered. We walk through the audit we run on every new client, what to look for in your own tenant, and the questions to ask your reseller before the next renewal.
Get an M365 licensing audit →
AI & Copilot
Microsoft Copilot rollout: the boring-but-important stuff that derails most pilots
Copilot rollouts that fail almost always fail on the same things: data permissions that were never tidied up, sensitivity labels that were never deployed, and adoption training that nobody bothered to run. The fun part is easy. The boring part is what we get paid to do.
Talk to us about Copilot →
Cybersecurity
Business email compromise: the attack that costs Australian businesses more than ransomware
The attacks that drain bank accounts at Australian SMBs aren't the ones in the headlines. BEC (business email compromise) outscores ransomware on dollar losses every quarter the ACSC publishes a report. We cover what it looks like, why filters miss it, and the four controls that actually work.
Get a BEC posture review →
Backup & DR
Why your Microsoft 365 backup is probably not what you think it is
Microsoft does not back up your tenant the way most leadership teams assume. Retention is not the same as backup. Recycle bin is not the same as recovery. We explain what Microsoft does keep, what it doesn't, and why an independent M365 backup is now a baseline expectation, not a luxury.
Talk to us about M365 backup →
Cloud
Public cloud, private cloud, or both: how to pick where workloads actually belong
The "everything goes to Azure" story is over. Some workloads belong in public cloud, some belong on private infrastructure, and a surprising number belong in a hybrid that respects performance and cost. We share the simple framework we use with clients to decide.
Get a cloud placement review →
Compliance
AML/CTF Tranche 2: what the new obligations mean for legal, accounting and real estate firms
Tranche 2 is bringing professional service firms inside the AML/CTF regime for the first time. We summarise what's changing, what AUSTRAC is going to expect, and the IT and information-handling controls firms need to have in place before commencement.
Talk to us about Tranche 2 →
Strategy
What a vCIO actually does, and when your business is too big not to have one
Virtual CIO is one of the most over-used phrases in the MSP world. We explain what we mean by it, what a quarterly business review with us actually looks like, and the size and complexity of business where it stops being optional.
Talk to us about vCIO →
Microsoft 365
Teams Calling versus a separate phone system: which one actually wins?
Microsoft Teams Calling has matured to the point where, for most businesses, it's now the right answer. We walk through the comparison we make with clients between Teams Calling, 3CX and a traditional carrier voice service, and where each one still wins.
Talk to us about voice →