Notes from the audits
Email security, without the vendor noise
What we actually find inside Australian Microsoft 365 and Google Workspace tenants, and what the rules around them require of you.
Insurance9 July 2026 · 5 min readAnswering the cyber insurance questionnaire honestly
Insurers now ask specific, checkable questions about your email tenant. Guessing at the answers is how claims get reduced.
Read the article →
Healthcare2 July 2026 · 6 min readNotifiable data breaches: what an Australian practice must do in 30 days
Health service providers are covered by the Privacy Act regardless of turnover. Here's what the NDB scheme requires when a mailbox is compromised.
Read the article →
Compliance25 June 2026 · 7 min readThe Essential Eight, translated for a 20-person Australian business
The ACSC's Essential Eight was written for government agencies. Here's what Maturity Level One honestly means when you're a 20-person firm running Microsoft 365.
Read the article →
Google Workspace18 June 2026 · 6 min readWhat a Google Workspace security audit actually checks
Beyond 'turn on 2FA' — the twelve settings that decide whether a mailbox compromise stays contained or turns into a payment-redirection claim.
Read the article →