Ready when your insurer or client asks.
We help you meet the security standards your clients, insurers and industry expect, and give you the documents and reports to show it.
Our compliance service helps you meet the security expectations of your insurer, your clients and your industry. We align your systems to the Australian Signals Directorate's Essential Eight, follow ISO 27001 aligned processes, help you complete cyber insurance and client security questionnaires, and keep the policies and reports that show what is in place.
The standards, the paperwork and the proof.
Compliance is part of how we run your systems, not a separate project.
Essential Eight alignment
Your systems checked and improved against the Essential Eight, the Australian baseline for cyber security.
Questionnaires answered
Help completing cyber insurance and client security questionnaires with confidence.
Policies and documents
The IT and security policies your business needs, written for how you actually work.
Regular reporting
Reports that show where you stand and what has improved, ready for partners and insurers.
The Essential Eight security controls.
The Essential Eight is the same baseline the Australian Government holds its own agencies to. For us, alignment is the starting line, not an upsell.
Application control
Only approved software runs, so malware cannot simply launch itself.
Patch applications
Apps kept current, closing the holes attackers look for first.
Restrict Office macros
Risky Microsoft Office macros blocked or tightly controlled.
User application hardening
Browsers and apps stripped of the features attackers abuse.
Restrict admin privileges
Admin rights limited to the people who genuinely need them, and reviewed often.
Patch operating systems
Windows and devices updated on a schedule, not eventually.
Multi-factor authentication
A second factor on every login, the single biggest quick win.
Regular backups
Critical data backed up, kept separate and tested for recovery.
Four maturity levels. One honest picture.
Each control is rated against the ACSC Essential Eight Maturity Model, and your overall maturity is only as strong as your weakest control. Level 1 is our standard starting point.
Exposed
Gaps an attacker could walk straight through. Where many businesses quietly sit.
Baseline
Defends against common, opportunistic attacks. A defensible floor.
Strengthened
Stronger controls against deliberate, targeted attackers. Worth working toward for businesses holding client data.
Hardened
Resilient against adaptive, sophisticated attackers.
The questions are getting harder.
Insurers want proof of multi-factor sign-in and tested backups before they renew. Clients are adding security clauses to engagement letters. We make sure you can answer yes, and show it.
- Insurance renewalsThe controls insurers ask about, in place and documented.
- Client expectationsClear answers when a client asks how you protect their information.
- Kept up to dateChecked each year as standards and your business change.
Backed by SB Cyber
SB Cyber is the cyber security division of the SB Systems Group, so compliance and security sit with the same team that runs your IT.
Related solutions
Cyber security
Protection, round-the-clock monitoring and incident response from SB Cyber.
Visit SB Cyber →Microsoft 365
Email, Teams, SharePoint and sign-ins set up properly, kept secure and backed up.
Learn more →Advisory and training
Roadmaps, budgets and reviews, plus practical training for your team.
Learn more →Common questions
Quick answers to what businesses ask before they get in touch. Can't see yours? We're happy to talk it through.