News, Guides & Insights

AI phishing attacks: how to train your staff in 2026

The old advice was to teach staff to spot typos, dodgy sender addresses, and too-good-to-be-true offers. That advice is now close to useless…

Data classification for Copilot: making Microsoft 365 AI-safe

Before you let an AI assistant loose on your business, there is one question that matters more than which model you chose: does your AI know which of your files are confidential?

SMB1001 Gold now requires an AI use policy. Here is what goes in it.

Buried in the SMB1001:2026 Gold control set is a requirement most businesses have not noticed: a written policy for the responsible and secure use of AI. Here is what the control...

Data governance for small business: why your AI risk is really a permissions problem

Most small businesses we talk to think they have an AI problem. They have a data governance problem wearing an AI costume…

Privacy Act changes 2026: 12 things Australian SMBs must do

Most AU SMBs we work with want a checklist they can actually run against, not another summary of what changed…

Cyber insurance for Australian SMBs in 2026: what underwriters actually want

Premiums are up, cover has narrowed, and underwriters now ask much harder questions. Here is what Australian SMBs need in place before renewal to avoid a declined claim or a...

AI model risk: what it is and how Australian businesses manage it

The model that used to tell you whether to build, hold cash, or extend credit was a spreadsheet you could read. Now it is AI, and most businesses have not changed their oversight...

Why no single tool wins: AI and the whole security ecosystem

There is no AI silver bullet. Every security layer has a gap another layer exists to cover. Here is the whole ecosystem, layer by layer, and the part the tool vendors leave out.

AI Policy-as-Code: Deployable YAML Templates for 2026

Most AI governance lives in a PDF nobody reads and nothing enforces. Here are four deployable templates that turn your policy into configuration inside Microsoft Purview,...

What is an agentic SOC? AI detection and response, explained

Security tools produce thousands of alerts a day and most are never read. Here is how an agentic SOC triages at machine speed, and why a human still signs off the decisions that...

Network segmentation for AI agents: containing machine-speed attacks

Once an attacker is inside, what matters is how far they can move. On a flat network, AI fans out in minutes. Here is how segmentation and zero trust network access contain the...

Shadow AI Audit: The Discovery Playbook Before Governance

Twelve to fifteen AI tools in active use, and the IT team knows about three of them.