24/7 watch and response
Round-the-clock security monitoring, and an engineer on every incident within 10 minutes.
Cyber security for Melbourne businesses
The Essential Eight, done for you.
The eight cyber security controls the Australian Government says stop most attacks. Every one is included in your managed IT plan: set up, watched 24/7 and reported on.
Control 01
Multi-factor sign-in
A password alone isn’t enough to get in.
What we do
Phishing-resistant MFA on every account, enforced for everyone, admins included.
Control 02
Regular backups
Copies of your data that ransomware can’t delete.
What we do
Off-site, unchangeable backups with regular restore tests, so we know they work.
Control 03
Patch applications
Browsers, Office and PDF readers kept up to date.
What we do
Automatic patching with a test group first, so updates land fast without breaking things.
Control 04
Patch operating systems
Windows, macOS and servers updated on schedule.
What we do
Scheduled OS updates on every device, with old machines flagged before support ends.
Control 05
Restrict admin rights
Only a few people hold the keys, and only when needed.
What we do
Separate admin accounts, removed local admin, and a regular review of who has access.
Control 06
Application control
Only approved software is allowed to run.
What we do
An approved-software list for each role, with a quick way to request something new.
Control 07
Office macro settings
Documents can’t run hidden code.
What we do
Macros blocked by default and only allowed, signed, where a team genuinely needs them.
Control 08
User app hardening
Browsers locked down against dangerous web pages.
What we do
Hardened browser and Office settings pushed to every device automatically.
In October 2026 ASD released an updated framework, ASD Essentials. We already work to it, so you’re covered whichever one your insurer or client asks about.
Free Break-It Test
Not sure where you stand? Find out free.
We check you against the Essential Eight, scan what faces the internet, and email your report and price the same day.
Start my free Break-It Test- 10 minutes of your timeNine questions and a quick sign-off, all online.
- We never touch your systemsWe only scan what faces the internet and you own.
- Report and price the same dayBranded report, your top gaps, your confirmed rate.
What’s in your security program
Locked-down network
A managed next-gen firewall, secure email and web gateways, and application control.
Staff training and awareness
Short, practical sessions that teach your team to spot phishing, fake invoices and suspicious calls.
Questions
Essential Eight: common questions.
What is the Essential Eight?
The Essential Eight are eight cyber security controls recommended by the Australian Signals Directorate to stop most attacks: application control, patching applications, Microsoft Office macro settings, user application hardening, restricting admin privileges, patching operating systems, multi-factor authentication and regular backups.
Is the Essential Eight mandatory for my business?
It’s mandatory for many government agencies, and increasingly expected by insurers, clients and tenders. For most small businesses it’s the clearest, most practical security standard to follow.
What maturity level do we need?
Most small businesses should aim for Maturity Level 1 first, then build towards Level 2. We’ll recommend the right target for your risk and your clients’ requirements.
How much does Essential Eight compliance cost?
All eight controls are included in our managed IT plan at $120 per staff member per month, ex GST. If your Break-It Test finds major gaps, a short security catch-up applies while we close them.
How do we find out where we stand?
Take the free Break-It Test. It checks what faces the internet and asks nine quick questions, then shows your gaps against the Essential Eight the same day.