Blog
Written for Australian small business owners and operators — not enterprise architects. Actionable advice from 20+ years in IT and 10+ years in cyber security.
Latest — Microsoft 365 automation, corporate card & NDIS compliance
ASD published the Essentials series on 15 October 2026. It targets large organisations, but its cloud chapter describes how a Microsoft 365 small business actually works.
Many Australian small businesses on Microsoft 365 pay for Zapier to do a job their licence may already cover, and send data offshore to do it. Here is how to tell which side of the line you are on.
The ASD confirmed a staged move to a new Essentials series over roughly two years. Why the change matters less than the headline, and why it validates cloud-first security.
Personal groceries, unapproved vendors, split transactions designed to dodge approval thresholds: corporate card misuse is mostly invisible under monthly reconciliation.
Accounting firms manage financial data for hundreds of small businesses. That concentration of sensitive data makes your clients a high-value target.
What each of the eight controls actually means for a 5-to-20 person business, why it matters, and where to start, written for owners, not security teams.
Australian insurers map underwriting to the Essential Eight and deny claims when controls are missing. What that means for a small business at renewal.
An honest answer for very small businesses: what actually applies at 6 staff, what does not, and the two controls that matter most.
The Commission expects documented evidence of proactive billing monitoring, not just accurate invoice processing. Here is what plan managers need.
The ATO gives three ways to value meal entertainment for FBT. Which one you can use depends on the records you keep, and they are easiest to capture when the expense happens.
Corporate card monitoring flags policy breaches, FBT exposure, and fraud risk on every transaction automatically, not just the ones your finance team happens to review.
The Fraud Fusion Taskforce is investigating NDIS fraud and SIL registration is now mandatory. Here is what NDIS providers need for fraud detection compliance.
The 10 M365 security settings every Australian small business should check, sorted by impact, aligned to the Essential Eight. Includes free M365 security check tool.
Honest breakdown of cyber security audit pricing for Australian small business. What you get, what it costs, and how to avoid paying for what you don't need.
How AI-powered fraud detection works, what it catches, and how it stops suspicious payments before money leaves your account.
Types of NDIS fraud, how to detect billing anomalies, NDIS Commission compliance requirements, and how AI monitoring protects providers and plan managers.
Honest breakdown of AI automation setup costs, ongoing platform fees, and how to calculate ROI. Typical payback in our projects: 4–8 weeks.
Unreviewed M365 settings leave your business exposed. Here's exactly what to change, in what order: MFA, legacy auth, admin roles, mail flow, and more.