Security controls, compliance and data protection.
Our writing on cybersecurity is built around the six controls that matter most to small NSW businesses: multi-factor authentication, patching, endpoint protection, tested backup, access reviews and email protection. If you have those, you are ahead of most. We do not write about nation-state threats or advanced persistent threats. We write about the attacks that actually land on small businesses.
The most common successful attack on a NSW small business is not a sophisticated piece of malware. It is an email that looks like it came from the CEO, asking the accounts person to pay a new supplier. The fix is not a new security product. The fix is a verbal verification rule, email authentication, and a culture of pausing before a payment change.
The articles in this section cover CPS 234 for small businesses whose clients are regulated, the difference between consumer and enterprise AI products on data safety, and the backup strategies that hold up when you actually need them.
You may not be APRA-regulated, but your clients will ask. A one-page control statement, not a fifty-page policy.
Read more →The consumer product, the enterprise product, and what your employees actually do at 9pm on a Sunday.
Read more →