News, Guides & Insights

Shadow AI Audit: The Discovery Playbook Before Governance

Twelve to fifteen AI tools in active use, and the IT team knows about three of them.

WA went first on AI law. The EU went hardest. Microsoft just made both irrelevant for the Australian AI supply chain.

Microsoft’s SSPA program now requires ISO 42001 for sensitive-use AI suppliers. Australia chose not to legislate AI. The combined effect on the Australian AI supply chain is...

Windows 10 end of support: the AU SMB playbook for what comes next

Windows 10 support ended October 2025. Here is what AU SMBs still on Win 10 need to do, including cyber insurance and compliance impact.

AI Managed Service Provider: The 5 Services to Expect (2026)

What does an AI managed service provider actually deliver? The five services that separate a genuine AI-led MSP from a reseller with an AI banner.

Phishing-resistant MFA: why your fallbacks just bypassed it

Two attacks in 2025 showed that FIDO2 passkeys fail when MFA fallbacks stay enabled. What Australian businesses need to audit in their Microsoft 365 tenant.

ISO 42001 vs NIST AI RMF vs GfAA: AI governance frameworks compared

ISO 42001, NIST AI RMF, and Australia’s GfAA do different things for different audiences. Honest comparison and recommendation for Australian businesses.

NIST Cyber AI Profile explained: what NIST IR 8596 means for Australian businesses

NIST has published the first cybersecurity framework built for AI. NIST IR 8596 explained in plain terms for Australian businesses deploying AI in 2026.

Privacy Act, Essential Eight or SMB1001? How the frameworks overlap

The most common question we get from Perth SMBs working through their compliance obligations: “if I do Essential 8 (or SMB1001), does that cover Privacy Act compliance too?”...

Privacy Act 2026 enforcement: what the penalties mean for your business

Privacy Act 2026 enforcement is live. Here is what the OAIC is actually looking at, the new penalties, and what AU SMBs need to do now.

Business email compromise in 2026: AI has changed the game

Business email compromise is the costliest crime in cybersecurity, and AI just removed its last weaknesses. Here are the two variants that hurt most, and the free process rule...

Which Australian MSPs Lead on AI Governance in 2026?

Most Australian businesses are already using AI. Few are governing it. Six criteria that define genuine AI expertise in an Australian MSP, and how the market shapes up against...

Microsoft 365 packaging changes 2026: what AU SMBs actually need to know

Microsoft is making two separate changes to 365 in 2026: packaging changes in June, then price rises in July. The packaging shift is the one that will quietly pull features out of...