News, Guides & Insights

Essential 8 Maturity Level 3: what it actually takes and who genuinely needs it

Essential Eight Maturity Level 3 is built for adaptive, well-resourced adversaries, and most businesses chasing it do not need it. What ML3 actually requires across all eight...

An AI agent deleted a database in nine seconds. Don’t ban it, govern it

An AI agent deleted a company’s production database and every backup in nine seconds. The model was not the villain, the missing governance was. Here is what it teaches...

What does a vCIO do? Your AI strategy needs one, not a chatbot

The day-to-day of IT support keeps the lights on. A vCIO works a level above that, on the questions that decide whether your technology helps or holds you back…

IT asset lifecycle management: stop buying technology by accident

When hardware is bought reactively, three things go wrong. Costs become lumpy and unpredictable, because everything seems to fail at once.

Penetration testing vs vulnerability scanning: what is the difference?

The confusion is understandable. Both look for weaknesses. But one is an automated list of possible problems, and the other is a skilled human, or increasingly a skilled human...

AI phishing attacks: how to train your staff in 2026

The old advice was to teach staff to spot typos, dodgy sender addresses, and too-good-to-be-true offers. That advice is now close to useless…

Data classification for Copilot: making Microsoft 365 AI-safe

Before you let an AI assistant loose on your business, there is one question that matters more than which model you chose: does your AI know which of your files are confidential?

SMB1001 Gold now requires an AI use policy. Here is what goes in it.

Buried in the SMB1001:2026 Gold control set is a requirement most businesses have not noticed: a written policy for the responsible and secure use of AI. Here is what the control...

Data governance for small business: why your AI risk is really a permissions problem

Most small businesses we talk to think they have an AI problem. They have a data governance problem wearing an AI costume…

Privacy Act changes 2026: 12 things Australian SMBs must do

Most AU SMBs we work with want a checklist they can actually run against, not another summary of what changed…

Cyber insurance for Australian SMBs in 2026: what underwriters actually want

Premiums are up, cover has narrowed, and underwriters now ask much harder questions. Here is what Australian SMBs need in place before renewal to avoid a declined claim or a...

AI model risk: what it is and how Australian businesses manage it

The model that used to tell you whether to build, hold cash, or extend credit was a spreadsheet you could read. Now it is AI, and most businesses have not changed their oversight...