# AUCyber - Full Content > Concatenated content of all aucyber.com.au pages, optimised for LLM ingestion. --- # AUCyber - Securing Your Digital Future > Australia's trusted cybersecurity and cloud provider. IRAP-assessed to PROTECTED, ISO 27001-certified, DISP-member. Managed IT, Managed Cybersecurity, Managed Cloud, Cyber Consulting and App Development for governments and enterprise. URL: https://aucyber.com.au/ ## What we do AUCyber is an ASX-listed cybersecurity and cloud provider. We design, build and run the cyber and cloud platforms that protect Australia's governments, critical national industries and enterprise customers. Everything is delivered onshore by Australian-based engineers, analysts and consultants. ## Who we serve - Organisations with internal cyber and IT expertise that want a trusted Australian partner to extend their team. - Organisations that need expert guidance to design, implement and operate secure environments. ## Services - **Managed Cybersecurity** - Australian SOC, SIEM, EDR/MDR, email and DNS security, vulnerability management, incident response, compliance and awareness training. - **Managed IT** - Australian helpdesk, infrastructure monitoring, endpoint and device management, IT projects, with flat per-user pricing. - **Managed Cloud** - OpenStack Cloud and IRAP-PROTECTED VMware High Compliance Cloud, both with backup and disaster recovery. - **Cyber Consulting** - IRAP, ISO 27001, Essential Eight, SMB1001 and DISP/CPS 234/SOCI-aligned custom environments. - **App Development** - Australian, AI-assisted software builds, with cybersecurity baked in from day one. ## Why AUCyber - **Australian-based operations** - managed and delivered from Australia. Data stays onshore. Support in your timezone. - **Cleared and assessed** - IRAP-assessed to PROTECTED, ISO 27001-certified, DISP-member. - **Transparent partnership** - clear pricing, plain-English contracts, no hidden fees, no lock-in shocks. - **Scaled for tomorrow** - infrastructure with always more capacity than required. ## Locations Brisbane (HQ - Fortitude Valley), Canberra, Sydney, Melbourne, Adelaide. ## Contact - Phone: 1800 282 568 - Investor Centre: https://aucyber.com.au/investors - Listed: ASX:CYB ACN: 80 622 728 189. --- # About AUCyber > AUCyber is an ASX-listed cybersecurity and cloud provider supporting governments, critical industries and enterprise. IRAP-assessed, ISO 27001-certified, with offices in QLD, ACT, VIC, NSW and SA. URL: https://aucyber.com.au/about ## Our promise AUCyber delivers scalable cybersecurity and cloud solutions that support Australian Governments and Critical National Industries - making their applications and systems more secure, more efficient, and more effective for all users and citizens. We show up the same way for a federal department, a state agency, a regional hospital and a growing fintech: same engineers, same standards, same accountability. ## Mission, vision, values - **Mission** - Deliver scalable cybersecurity and cloud solutions that protect Australia's governments, critical national industries, and the citizens who rely on them. - **Vision** - An Australia where every organisation has access to enterprise-grade cybersecurity built and operated onshore. - **Values** - Integrity, accountability, and Australian craftsmanship. ## What sets us apart - Australian-based: managed and operated here. Data stays onshore. - Cleared and assessed: IRAP-assessed to PROTECTED, ISO 27001-certified, DISP-member. - Transparent partnership: clear pricing, plain-English contracts, no hidden fees. - Scaled for tomorrow: always more capacity than required. ## Our Board - **Joseph Demase** - Chairman & Managing Director. - **Hugh Robertson Jnr** - Non-Executive Director. - **Conrad Morgan** - Non-Executive Director. - **Adam Gallagher** - Company Secretary. ## Our Leadership - **Chris Demase** - Chief Operating Officer. - **Shane Miller** - Chief Technology Officer. - **James Fratantaro** - Chief Revenue Officer. - **Chelsea McDonald** - General Counsel. ## Offices - Brisbane (HQ): Level 3, 120 Wickham St, Fortitude Valley QLD 4006 - Canberra: Level 1, 60 Marcus Clarke St, Canberra ACT 2601 - Melbourne: Level 7, 505 Little Collins St, Melbourne VIC 3000 - Sydney: Level 4, 52 Phillip St, Sydney NSW 2000 - Adelaide: Level 5, Suite 503, 115 Grenfell St, Adelaide SA 5000 ## Certifications and recognition ISO 27001, IRAP-assessed to PROTECTED, DISP Member, SOC Provider of the Year 2024. ACN: 80 622 728 189. --- # Managed Cybersecurity - AUCyber > AUCyber's Managed Cybersecurity service: Australian Security Operations Centre, SIEM, EDR/MDR, email and DNS security, vulnerability management, incident response and Essential Eight uplift. IRAP-assessed to PROTECTED. URL: https://aucyber.com.au/managed-cybersecurity ## What you get A practical Managed Cybersecurity service run by Australian analysts and engineers, designed to lift your security posture without the noise. Everything is operated onshore. ## Capabilities - **Australian SOC** - monitoring, triage and response from analysts based in Australia, working in your timezone. - **SIEM** - log collection, correlation and detection engineering, tuned to your environment. - **EDR / MDR** - endpoint detection and managed response across Windows, macOS and Linux. - **Email security** - anti-phishing, anti-malware, impersonation defence and DMARC. - **DNS security** - protective DNS to block malicious destinations before they're reached. - **Vulnerability management** - continuous scanning, prioritisation and remediation tracking. - **Incident response** - retainer-backed IR with clear runbooks and clear comms. - **Compliance support** - Essential Eight uplift, ISO 27001 alignment, NDB readiness. - **Awareness training** - practical phishing simulations and short-form training. ## How we work A senior analyst is assigned to your account. We agree what "good" looks like, baseline your environment, and tune detection and response to fit. We report monthly in plain English with the trends, the wins and the work that's next. ## Outcomes - Reduced dwell time and faster contained incidents. - Visibility across endpoints, identity, email and cloud. - A clear roadmap to Essential Eight maturity and ISO 27001 alignment. - An Australian team that knows your environment. ## Talk to us Phone: 1800 282 568 - or use the contact form at https://aucyber.com.au/managed-cybersecurity. --- # Managed IT - AUCyber > AUCyber Managed IT: Australian helpdesk, infrastructure monitoring, endpoint management and IT projects - flat per-user pricing, no offshore handovers. URL: https://aucyber.com.au/managed-it ## What you get A complete Managed IT service for Australian organisations - with a single Australian team accountable for your helpdesk, infrastructure and devices. Flat per-user pricing. ## Capabilities - **Helpdesk** - Australian-based engineers handling tickets end-to-end. - **Infrastructure** - monitoring and management of servers, networks and core platforms. - **Endpoints and devices** - provisioning, patching, lifecycle and recovery for laptops, desktops and mobile. - **Microsoft 365 management** - identity, licensing, mail flow, Teams and SharePoint. - **Backup and recovery** - including M365 backup and disaster recovery. - **IT projects** - migrations, refreshes, new sites and rollouts run by senior engineers. ## How we work We onboard your environment, document everything, and assign a primary engineer who knows your business. Tickets, change management and reporting are transparent. Pricing is flat per user with no surprise add-ons. ## Outcomes - A reliable Australian team that picks up the phone. - Predictable, flat pricing. - Endpoints and infrastructure that stay current and patched. - Less time spent on IT, more time spent on your work. ## Talk to us Phone: 1800 282 568 - or use the contact form at https://aucyber.com.au/managed-it. --- # Cloud Services - AUCyber > AUCyber's Australian cloud: an OpenStack Cloud and an IRAP-PROTECTED VMware High Compliance Cloud - both with full backup and DR. Enterprise spec at a price that surprises. URL: https://aucyber.com.au/cloud-services ## Two Australian clouds - **OpenStack Cloud** - flexible, API-driven and cost-effective for production workloads, dev/test and platform builds. - **VMware High Compliance Cloud** - IRAP-assessed to PROTECTED. Engineered for government and regulated workloads where assurance and isolation matter. Both clouds are Australian-operated, with paired regions for resilience. ## Capabilities - Compute, storage and networking with predictable pricing. - Australian-operated backup with retention and recovery testing. - Disaster recovery between paired regions. - Microsoft 365 backup with point-in-time recovery. - Migration support from public cloud, on-prem and other providers. - Security baked in: identity, key management and segmentation. ## Why our cloud - Enterprise-grade infrastructure run by Australians, for Australians. - IRAP-PROTECTED option for sensitive workloads. - Always more capacity than required - engineered to grow with you. - Plain-English commercials with no hidden egress traps. ## Talk to us Phone: 1800 282 568 - or use the contact form at https://aucyber.com.au/cloud-services. --- # Cyber Consulting - AUCyber > AUCyber's Cyber Consulting practice: IRAP readiness and assessments, ISO 27001, Essential Eight, SMB1001 and fully compliant DISP / CPS 234 / SOCI custom environments. Australian consultants who actually operate these frameworks. URL: https://aucyber.com.au/cyber-consulting ## Frameworks we work in - **IRAP** - readiness and assessments aligned to the ISM. Plus IRAP-assessed cloud and managed services if you need a destination. - **ISO 27001** - gap analysis, ISMS build, internal audit and certification support. - **Essential Eight** - current vs target maturity, uplift roadmap and execution. - **SMB1001** - practical baseline cyber for small and mid-sized Australian businesses. - **DISP / CPS 234 / SOCI custom environments** - purpose-built environments aligned to defence, APRA-regulated entities and critical infrastructure obligations. ## How we work - Discover, Assess, Uplift, Assure 1. **Discover** - understand your business, regulatory drivers and current state. 2. **Assess** - measure against the chosen framework with a clear gap analysis. 3. **Uplift** - execute the roadmap with our consultants and engineers. 4. **Assure** - formal assessment, certification or attestation, then continuous improvement. ## Why AUCyber consulting - Consultants who operate these frameworks every day, not just write about them. - Joined-up with our SOC, cloud and managed services if you want a single accountable partner. - Australian-based, government-cleared where required. ## Talk to us Phone: 1800 282 568 - or use the contact form at https://aucyber.com.au/cyber-consulting. --- # App Development - AUCyber > Australian app development, AI-assisted. Onshore developers with a cybersecurity background. Walk away from our first call with a working prototype. URL: https://aucyber.com.au/app-development ## What we build Web apps, internal tools, mobile apps and integrations - built by Australian developers, with cybersecurity considered from the first line of code. AI-assisted development means we move faster without cutting corners. ## How we work - **Discovery first call** - bring an idea, leave with a working prototype. - **AI-assisted build** - we use AI to accelerate the work, with senior engineers reviewing every change. - **Secure by default** - auth, secrets, audit, OWASP basics handled up front. - **Australian team** - no offshoring, no time-zone games. ## Why AUCyber for software - Backed by AUCyber's cyber and cloud capability - your app is built and run on infrastructure we know inside out. - Transparent pricing and clear scopes. - Optionally hosted on AUCyber's IRAP-PROTECTED cloud. ## Talk to us Phone: 1800 282 568 - or use the contact form at https://aucyber.com.au/app-development. --- # Partners - AUCyber > AUCyber's partner ecosystem spans world-class technology vendors, Australian channel partners and government programs - aligned to deliver cybersecurity and cloud at scale. URL: https://aucyber.com.au/partners ## Why partner with AUCyber - Australian, IRAP-assessed and ISO 27001-certified delivery partner. - Joined-up cyber, cloud, managed services and software capabilities. - A trusted partner for Australian government and enterprise opportunities. ## Partner types - **Technology vendors** - security, network, identity, endpoint and cloud platforms we operate at scale for our customers. - **Channel partners** - MSPs, consultancies and resellers who want a trusted Australian cyber and cloud partner behind them. - **Industry and government programs** - alignment with relevant Australian programs and frameworks. ## Become a partner Phone: 1800 282 568 - or use the contact form at https://aucyber.com.au/partners. --- # Investor Centre - AUCyber Limited (ASX:CYB) > AUCyber Limited (ASX:CYB) Investor Centre - share price, ASX announcements, annual reports, governance and shareholder services for AUCyber investors. URL: https://aucyber.com.au/investors ## Quick links - Share price (ASX:CYB): https://www.asx.com.au/markets/company/CYB - ASX announcements: https://www.asx.com.au/markets/company/CYB - Annual and half-year reports: https://www.asx.com.au/markets/company/CYB - Investor calendar: https://www.asx.com.au/markets/company/CYB - Investor portal: https://investor.australiacloud.com.au/ ## About AUCyber Limited AUCyber Limited (ASX:CYB) is an ASX-listed cybersecurity and cloud company supporting governments, critical national industries and enterprise. The company is IRAP-assessed to PROTECTED, ISO 27001-certified and a DISP member, with offices in Brisbane (HQ), Canberra, Sydney, Melbourne and Adelaide. ## Governance and disclosure AUCyber is governed by a board with experience across government, financial services and Australian technology, and operates a continuous disclosure program in accordance with the ASX Listing Rules. ## Investor relations contact - Email: investors@aucyber.com.au - Phone: 1800 282 568 - ACN: 80 622 728 189 # News Articles --- # Cyber Resilience is now a Business Responsibility **Published:** 9 April 2026 **Category:** Industry News **URL:** https://aucyber.com.au/knowledge-base/cyber-resilience-responsibility **Source:** https://aucyber.com.au/blogs/cyber-resilience-responsibility/ They are business risks that affect operations, revenue, customer trust and long-term growth. --- From the Desk of AUCyber's MD: #### *Cyber Resilience is no longer just an IT responsibility and Cybersecurity is no longer just a technical challenge.* They are business risks that affect operations, revenue, customer trust and long-term growth. Across Australian organisations, we are seeing a shift from cybersecurity being managed within IT teams, to becoming a leadership-level responsibility. Learn how Essential Eight, SOC monitoring, and backup strategies work together to reduce business risk. ## What is Cyber Resilience? [Cyber resilience](https://aucyber.com.au/blogs/cyber-resilience-in-2026/) refers to an organisation’s ability to: - prevent cyber incidents where possible - detect threats early - recover quickly when incidents occur **It is not about eliminating risk entirely. It is about maintaining operations despite it.** ## Why Prevention alone is Not Enough Many organisations still focus heavily on prevention. While important, prevention does not stop all attacks. Modern threats evolve quickly, and even well-secured environments can be compromised. This is why [organisations must prepare beyond prevention](https://www.cyber.gov.au/about-us/view-all-content/reports-and-statistics/the-commonwealth-cyber-security-posture-in-2025). ## The Three Pillars of Cyber Resilience - ### Prevention (Essential Eight) Frameworks like the [Essential Eight](/cyber-consulting) help reduce attack surface and limit exposure. This includes controls such as: - multi-factor authentication - patching - application control - restricting administrative privileges These controls significantly reduce the likelihood of compromise. - ### Detection (SOC / SIEM) Detection focuses on identifying threats early. [Security Operations Centres (SOC)](/managed-cybersecurity) and SIEM platforms provide: - continuous monitoring - threat visibility - rapid response capability Reducing attacker dwell time is critical to limiting impact. - ### Recovery (Backup & Resilience) [Recovery](https://aucyber.com.au/blogs/world-backup-day-2026/) ensures that operations can be restored quickly. This includes: - data backup strategies - recovery testing - business continuity planning When incidents occur, recovery capability determines the level of disruption. ## The Business Impact of Cyber Incidents Cyber incidents rarely fail because of a single issue. They escalate because organisations lack visibility, preparation or [recovery capability](https://aucyber.com.au/disaster-recovery/). The real cost often comes from: - downtime - operational disruption - lost productivity - reputational damage ## Why Leadership Ownership Matters Cyber resilience is now a leadership responsibility. Executives and boards must understand: - their organisation’s exposure - how quickly threats can be detected - how effectively operations can be restored This is no longer something that can be delegated entirely to technical teams. ## Final Thoughts ### The organisations that perform best are not those that avoid every incident. *They are the ones that are prepared for them.* Cyber resilience is built through: - strong foundations, - continuous visibility, and - the ability to recover when needed If your organisation is reviewing its cyber resilience strategy, understanding where you sit across prevention, detection and recovery is the first step. [Let AUCyber help you](https://aucyber.com.au/contact-us/) and your business. [Contact us today](https://aucyber.com.au/contact-us/) --- # World Backup Day is a Reminder, Recovery is the Reality **Published:** 10 March 2026 **Category:** Industry News **URL:** https://aucyber.com.au/knowledge-base/world-backup-day-2026 **Source:** https://aucyber.com.au/blogs/world-backup-day-2026/ There’s a sentence my team hears immediately after something has gone wrong. --- From the Desk of AUCyber's COO: There’s a sentence my team hears immediately after something has gone wrong. #### *“We have backups.”* It’s meant to reassure. In practice, it rarely does. Because when customers call us, they’re not asking whether data exists somewhere. They’re asking how fast they can be operational again. With **[World Backup Day](https://www.worldbackupday.com/en)** approaching, it’s a good moment to talk honestly about the difference between having backups and being able to recover under pressure. And those are not the same thing. ## Backups Create Comfort. Recovery Determines Impact. Most businesses are not lacking tools. They have platforms. They have storage. They have retention policies. Yet when disruption occurs, timelines stretch.** Why?** #### Because restoration is not just a technical activity. It is a coordination problem. A prioritisation problem. A decision problem under pressure. - Which systems come back first? - Who authorises changes? - What dependencies exist? - What happens outside business hours? - Who validates integrity before access is restored? If those answers are unclear, recovery slows. **And when recovery slows, impact compounds.** ## Shared Responsibility Becomes Real Very Quickly Vendors ensure their services operate. They do not own your operational continuity. If deletion, corruption, or encryption affects your environment, accountability sits with the organisation not the platform provider. This is where many assumptions collapse. Because while it is easy to believe recovery will work, few organisations have validated it end-to-end in real conditions. Confidence without testing is not resilience.** It is exposure.** ## Retention Is Not Recovery We frequently see organisations assume that having a backup platform is enough. Platforms such as Veeam are powerful but without defined restore priorities, testing discipline and operational ownership, capability remains unproven. Retention policies preserve information. **They do not guarantee rapid restoration.** In almost every incident we support, the challenge is not whether data exists somewhere. ### The challenge is: - How quickly it can be identified - How reliably it can be restored - How many systems are affected at once - How access and permissions are rebuilt - How the business verifies it can operate again These details determine whether disruption lasts hours or days. ## Why Identity Changes the Equation Many modern incidents begin with legitimate access being misused. No alarms. No dramas. Just activity that appears normal until someone asks, #### *“Does this make sense?”* When identity is involved, deletion and encryption can spread quickly across mail, file stores, and collaboration environments. **Detection matters. **But if recovery is slow, damage continues. ## [Essential Eight](/cyber-consulting) Isn’t About Headlines. It’s About Outcomes. ### The biggest improvements we see rarely come from adding new technology. They come from disciplined execution of fundamentals: - - Knowing what must be restored first - Rehearsing restoration pathways - Reducing friction in approvals - Maintaining visibility across identity and endpoints - Shortening [detection and response](/managed-cybersecurity) timelines None of this is glamorous. **All of it reduces impact.** ## What Strong Organisations Do Differently Resilient organisations treat recovery as a capability, not a checkbox. They define expectations in advance. They test them. They refine them. #### They understand that when something goes wrong, speed is the currency that matters most. ## A Practical Reflection for World Backup Day So as World Backup Day arrives, here is the question worth bringing to leadership: If we had to prove our ability to restore critical operations today, could we? If the answer is uncertain, that’s where work should begin. ## Final Thoughts ### Technology accelerates detection. ***People, preparation, and rehearsal determine outcomes.*** At [AUCyber](https://aucyber.com.au/solutions/), our role is to help organisations close the distance between believing they can recover and knowing they can. Because in the end, recovery speed determines impact. [Contact us today](https://aucyber.com.au/contact-us/) --- # AUCyber accelerates customer outcomes through expanded Kaseya partnership **Published:** 2 March 2026 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/kaseya-partnership **Source:** https://aucyber.com.au/news/kaseya-partnership/ As customer environments become more complex, organisations need service providers that can move quickly, operate seamlessly across disciplines, and resolve issues before they impact the business. Siloed tools and disconnected teams no long… --- ### AUCyber has expanded its partnership with Kaseya to accelerate automation and cross functional service delivery across its Managed Security, Managed IT, and Cloud teams delivering faster, more consistent outcomes for Australian organisations. As customer environments become more complex, organisations need service providers that can move quickly, operate seamlessly across disciplines, and resolve issues before they impact the business. Siloed tools and disconnected teams no longer meet that expectation. By deeply integrating Kaseya’s platform across its core service lines, AUCyber is enabling security, IT, and cloud operations to function as a single, coordinated capability. This allows incidents, operational issues, and remediation actions to be identified, prioritised, and resolved more efficiently without manual hand offs or delays. ### The expanded partnership delivers clear commercial benefits for customers, including: - End to end automation across security, IT, and cloud operations - Faster, coordinated response to operational and security events - Reduced downtime and operational friction - Consistent service delivery across complex, multi platform environments - Improved reliability and scalability as customer needs grow Chris Demase, Chief Operating Officer of AUCyber, said the partnership reflects a focus on delivering measurable value, not just technology. “Our customers expect their services to work together, respond quickly, and scale without disruption,” Demase said. “This partnership enables us to automate more, remove friction between teams, and deliver outcomes faster and more consistently.” “By bringing our [Managed Security](/managed-cybersecurity), [Managed IT](/managed-it), and [Cloud](/cloud-services) teams onto a common, integrated platform, we’re giving customers a more responsive, resilient service model.” AUCyber continues to invest in automation, platform integration, and operational maturity to help customers reduce risk, improve service reliability, and focus on their core business. The expanded collaboration with Kaseya is a key part of AUCyber’s growth strategy allowing the business to scale capability, increase efficiency, and deliver stronger outcomes while maintaining local accountability and hands on expertise. “The AUCyber team does amazing work for their clients, and Kaseya is proud to support and help them deliver it,” said Daniel Garcia, VP & GM for Kaseya APAC. “Together, we’re able to help more Australian businesses to thrive in an increasingly technology driven world while ensuring they stay protected against evolving cyber threats.” #### About AUCyber AUCyber is a cyber security and secure cloud services provider delivering Managed Security, Managed IT, and Cloud solutions to organisations across the country. The company specialises in threat detection and response, security operations, Essential Eight uplift, cloud security, and resilient IT infrastructure. With a strong focus on operational maturity, automation, and measurable outcomes, AUCyber partners with organisations to reduce risk, strengthen resilience, and ensure technology supports long-term business growth. Headquartered in Australia, AUCyber combines enterprise-grade capability with local accountability and hands-on expertise. #### About Kaseya Kaseya is the leading global provider of AI-powered IT management and cybersecurity software. Kaseya delivers a unified technology platform to manage infrastructure, secure endpoints, back up critical data, and streamline operations for more than 50,000 MSP and SMB customers around the globe. Kaseya Asia Pacific head-office is based in Sydney, Australia. To learn more, visit [kaseya.com](https://www.kaseya.com/). --- # Why Cyber Resilience in 2026 is about Judgement, not just Technology **Published:** 19 February 2026 **Category:** Industry News **URL:** https://aucyber.com.au/knowledge-base/cyber-resilience-in-2026 **Source:** https://aucyber.com.au/blogs/cyber-resilience-in-2026/ There’s a question I hear most often usually after something has gone wrong, not before: --- From the Desk of AUCyber's CTO: There’s a question I hear most often usually after something has gone wrong, not before: #### *“We had the tools. Why didn’t we see it coming?”* ## Technology doesn’t understand your business. People do. It’s an uncomfortable question, because the answer is rarely technical. Most organisations don’t fail because they lack security technology. They fail because **no one applied judgement early enough to recognise that something wasn’t normal.** In 2026, cyber resilience isn’t about buying better tools. **It’s about how quickly people recognise risk in context and what happens next.** I’ve seen organisations with highly sophisticated security stacks suffer major incidents. I’ve also seen organisations with far simpler environments detect threats early and contain them quickly. The difference was never budget. It wasn’t brand choice. It wasn’t how many tools were deployed. #### *It was context.* Technology doesn’t know which systems are critical at 2am. It doesn’t understand which access patterns are expected during a night shift. It can’t tell when something is technically allowed but operationally dangerous. #### *People can.* ## Detection Time is the metric that actually determines impact If there’s one metric that matters more than any other in modern incidents, **it’s detection time**. ### Not: - How many alerts fired - How advanced the dashboard looks - How comprehensive the report appears ### Detection time determines: - How far an attacker can move - How much data they can access - Whether recovery is straightforward or disruptive - Whether an incident stays technical or becomes a business crisis Across the incidents we’re involved in, the real damage is rarely caused by the initial compromise. It’s caused by the** hours or days before anyone realised something was wrong.** ## Why Identity keeps winning (and why that isn’t changing) Most modern incidents don’t start with malware. They start with **identity**. A dormant account that was never reviewed. An inherited permission that no one questioned. A shared credential that “worked fine” until it didn’t. Identity attacks succeed because they look legitimate. They blend into normal activity until someone applies judgement and asks: #### *“Does this make sense?”* Automation can highlight anomalies. Only experienced people can decide which anomalies matter. That’s not a tooling gap. That’s a** leadership and visibility gap.** ## Essential Eight: Discipline beats Maturity every time One of the biggest misconceptions I see is treating the **[Essential Eight](/cyber-consulting)** as a maturity race. In practice, **most organisations do not need to operate at higher maturity levels.** Maturity Level Two and Three are rare and typically required only in highly regulated or specialised environments. For the majority of organisations, the greatest reduction in real-world risk comes from **consistent, disciplined execution of the fundamentals.** What matters isn’t claiming maturity, it’s whether controls actually work under real conditions: - Patching what matters most, not everything - Controlling privileged access properly - Testing backups under pressure rather than assuming they work - Reducing attack surface consistently - Maintaining visibility across identity and endpoints This work isn’t glamorous. It doesn’t generate headlines. But it’s what actually stops small issues from escalating. ## Why Healthcare exposes these gaps faster than most sectors As we move into 2026, we’re also looking more closely at how these patterns show up across different industries starting with **healthcare**. Healthcare environments amplify the impact of poor visibility and delayed detection: - Complex systems - Legacy platforms - Third-party integrations - 24×7 operational pressure In healthcare incidents, attackers rarely need sophistication. They need **time**. When detection takes days instead of hours, consequences extend beyond systems affecting continuity of care, trust, and operational safety. Healthcare doesn’t create new cyber problems. It **exposes existing ones faster.** ## What “Good” actually looks like in 2026 The most resilient organisations we see today share common characteristics: - [Detection measured in hours, not days](https://aucyber.com.au/blogs/detection-time-benchmark-2026/) - Visibility across identity, [endpoints](https://aucyber.com.au/news/role-of-endpoint-security/), and cloud - Clear escalation paths - Analysts empowered to act, not just observe - Leadership that understands risk in business terms, not technical jargon None of this comes from buying another tool. It comes from **operating cybersecurity as a discipline**, guided by experience and judgement. ## Final Thoughts ### Technology accelerates detection. ***People determine outcomes.*** At [AUCyber](https://aucyber.com.au/solutions/), our role isn’t to sell fear or complexity. It’s to apply judgement where it matters most quietly, consistently, and before incidents become visible. That’s what leadership in cyber looks like in 2026. --- # AUCyber Detection Time Benchmark Sheet (2026) **Published:** 19 January 2026 **Category:** Industry News **URL:** https://aucyber.com.au/knowledge-base/detection-time-benchmark-2026 **Source:** https://aucyber.com.au/blogs/detection-time-benchmark-2026/ Below is the average real-world Time to Detect (TTD) for all the Australian businesses segment sizes. This is how long attackers stay hidden but AUCyber can show you how to shrink it fast. --- ## 2026 Detection Time Benchmarks (Australia)* Below is the average real-world Time to Detect (TTD) for all the Australian businesses segment sizes. This is how long attackers stay hidden but AUCyber can show you [how to shrink it fast](#reduce-detection-time). - SMB: 26–34 days - Mid-Market: 18–23 days - Enterprise: 7–12 days ### Why Does Detection Time Matters? The longer an attacker stays hidden and remains undetected within a system, the greater the potential damage they can inflict - ranging from data theft to operational disruption. Rapid detection is critical because every minute counts; the faster a breach is identified, the more effectively its impact can be contained and minimised. Detection speed = impact reduction. ### How Do Attackers Get In? Over 70% of cybersecurity breaches begin with [identity compromise](https://www.oaic.gov.au/privacy/your-privacy-rights/data-breaches/Identity-fraud) giving attackers access to critical systems and data. Our analysis shows that this is typically caused by: - #### Dormant accounts Old or unused accounts often remain active with valid credentials, giving attackers an easy, low‑visibility entry point into the environment. - #### Multi-Factor Authentication (MFA) gaps Incomplete MFA rollout or exceptions for certain users or systems create exploitable windows where attackers can bypass authentication controls. - #### Privileges misuse Over‑privileged accounts or poorly monitored admin rights allow attackers to escalate access quickly once they breach a single identity. ## **Where Most Organisations Are Blind** - #### Devices missing EDR Devices without [Endpoint Detection & Response](/managed-cybersecurity) tooling become blind spots where malware, lateral movement, and credential theft can occur unnoticed. - #### Unmonitored cloud workloads Workloads running in cloud environments without appropriate logging or proper security monitoring provide attackers an ideal place to persist and operate undetected. - #### Security logs kept for less than 30 days Short log retention limits the ability to investigate incidents, correlate suspicious activity, or identify slow‑moving or long‑dwell‑time attackers. - #### Alert fatigue Security teams overwhelmed with high alert volumes (low priority or false positives) often miss critical signals because the noise drowns out the events that actually matter. - #### Unpatched returning devices Outdated devices brought back into the network after being offline frequently reintroduce known vulnerabilities that attackers can quickly and easily exploit. ## **What "Good" Looks Like** By establishing these core security foundations across your organisation, you can significantly reduce security gaps and eliminate easy attack paths. This allows you to respond to threats with confidence and better protect both your business and your customers. - #### Detect threats within 24 hours - #### 100% Endpoint coverage - #### [24×7 Security Operations Centre (SOC) monitoring](/managed-cybersecurity) - #### Enforce MFA everywhere - #### No dormant admin accounts ## **Fastest Ways To Reduce Detection Time** - #### Fix your EDR coverage - #### Add 24×7 Managed SOC - #### Strengthen identity controls - #### Patch returning devices - #### Keep logs for at least 90+ days Not sure where to start or feeling overwhelmed? AUCyber is here to help. Let us do the heavy lifting and we will get your defences back on track, fast. [Enquire with us today](https://aucyber.com.au/contact/) ****Disclaimer:** Benchmarks are based on aggregated Australian incident response and SOC observations and should be used as comparative guidance, not guarantees.* --- # The 2026 Cyber Readiness Blueprint: What Every Australian Business Must Address Now **Published:** 4 January 2026 **Category:** Industry News **URL:** https://aucyber.com.au/knowledge-base/cyber-readiness-blueprint-2026 **Source:** https://aucyber.com.au/blogs/cyber-readiness-blueprint-2026/ The Essential Eight remains Australia’s most practical starting point for strengthening cyber resilience but manyorganisations misunderstand what “maturity” actually means. --- ## January: The Most Vulnerable Month of the Year for Australian Businesses ### January consistently produces more preventable incidents than any other month because: - Teams Return Slowly - Alerts Get Missed - Devices Come Back Unpatched - Dormant Accounts Remain Active - Monitoring Gaps Widen #### *Attackers know this and take advantage.* ## Essential Eight: The Foundation, Not a Maturity Race The [Essential Eight](https://aucyber.com.au/resources/the-essential-eight/) remains Australia’s most practical starting point for strengthening cyber resilience but many organisations misunderstand what “maturity” actually means. Most Australian businesses are not expected to [reach high maturity levels](/cyber-consulting). In fact, Level 2 and Level 3 are only required for highly regulated or high-risk industries. For everyone else, the focus in 2026 is simple: Strengthen the foundational controls that reduce real-world risk. ### These include: - Patch Discipline - MFA Coverage - Application Control - Regular [Backups](https://aucyber.com.au/backup/) - Hardening & Reducing Attack Surface - [Cyber Awareness Training](https://aucyber.com.au/phishing-awareness-training/) When these fundamentals are consistently executed, organisations drastically reduce exposure without chasing maturity levels that aren’t relevant to their sector. ## The Detection Time Crisis Attackers now need minutes, most businesses still detect threats in hours or days. ### This gap drives: - Lateral Movement - Credential Theft - Cloud Account Takeover - Business Disruption - Ransomware Spread Reducing detection time is the most important KPI for 2026. ## Identity is the Top Attack Vector Most SIEM deployments don’t fail because the technology is poor they fail because the visibility isn’t tuned, monitored, or interpreted by experts. ### A resilient organisation needs: - Normalised Logs - Behaviour Analytics - Real Analyst Review - Actionable Correlation - [24×7 Monitoring](/managed-cybersecurity) - A Tuned Detection Baseline This is where expertise and value matter most. The difference isn’t the volume of alerts it’s what skilled analysts do with them. ## Insurance, Compliance & Board Pressure Are Rising ### Insurers increasingly require: - Multi-factor Authentication (MFA) - Patch Discipline - Privileged Access Controls - Tested Backups - Demonstrated Detection Visibility ### Boards are demanding reporting that: - Is Simple - Shows Uplift - Tracks Risk Reduction - Demonstrates Incident Readiness Cyber Readiness is no longer a technical project it’s an operational requirement. ## AUCyber's Practical 90-Day Cyber Readiness Blueprint / Roadmap to Strengthen your Business ### Days 1–30: Reset & Visibility - Patch All Returning Devices - Disable Dormant Accounts - Rebaseline SIEM/SOC visibility - Validate MFA Coverage - Review Admin Access ### Days 31–60: Strengthening Controls - Improve Essential Eight Controls - Hardening & Configuration - Identity Uplift (SSO/MFA) - Backup Integrity Checks - Cyber Awareness Training Refresh ### Days 61–90: Continuous Improvement - Monthly Detection Insights - Incident Readiness Drills - SOC/SIEM Tuning - Formalise Cyber Roadmap For 2026 ## Final Thoughts 2026 will challenge Australian organisations more than the past three years combined. But with clarity, visibility, and consistent, practical uplift you can reduce risk, shrink detection time, and build measurable resilience. Start strong. Start early. Start with certainty. [Let AUCyber help you](https://aucyber.com.au/contact/) --- # Holiday Cybersecurity Checklist: Keep Your Business Safe While You Take a Break in 2025 **Published:** 8 December 2025 **Category:** Resources **URL:** https://aucyber.com.au/knowledge-base/holiday-cybersecurity-checklist **Source:** https://aucyber.com.au/resources/holiday-cybersecurity-checklist/ With the holiday season upon us, you can quickly ensure your systems stay protected with our carefully curated checklist, while your team takes their well-earned break. --- ## AUCyber's Cybersecurity Checklist for the holidays With the holiday season upon us, you can quickly ensure your systems stay protected with our carefully curated checklist, while your team takes their well-earned break. ### **People ** - Enable out-of-office alerts without exposing personal details. - Remind staff not to click on unexpected holiday-themed emails or attachments. - Confirm key contacts for incident response during the break. - Limit access for temporary or departing staff before holidays. ### Devices - Ensure all laptops and endpoints have the latest security patches installed. - Enable full-disk encryption for portable devices. - Verify [endpoint protection](https://aucyber.com.au/news/role-of-endpoint-security/) is active and updated (EDR/AV). - Require multi-factor authentication (MFA) for all remote logins. ### Data - Confirm backups have completed successfully and are stored securely offsite. - Test a data restore from backups before the break. - Encrypt sensitive files shared externally. - Restrict file-sharing permissions for non-essential users. ### Access - Review and disable unused admin accounts. - Rotate privileged account passwords before the holidays. - Check multi-factor authentication (MFA) enforcement across all critical systems. - Ensure monitoring and alerting remain active 24×7. ## Why do you need a Holiday Cybersecurity Checklist? Because cybercriminals don't take holidays but your business should be able to. [Download](https://go.aucyber.com.au/hubfs/Documents/Resources/AUCyber-Holiday_CS_Checklist.pdf) your free checklist and start 2026 stress-free! ### Think you need a second set of eyes before you switch off? AUCyber got you covered for all your cybersecurity needs. [Speak with our team today!](https://aucyber.com.au/contact/) --- # Rise of the “Stealth Hacker” **Published:** 3 November 2025 **Category:** Industry News **URL:** https://aucyber.com.au/knowledge-base/rise-of-the-stealth-hacker **Source:** https://aucyber.com.au/blogs/rise-of-the-stealth-hacker/ While many Australian organisations brace for high-impact cyber breaches, it’s the quiet, undetected threats that often cause the most lasting damage. --- ## A growing threat to data security and business profitability While many Australian organisations brace for high-impact cyber breaches, it’s the quiet, undetected threats that often cause the most lasting damage. Cybercriminals have traditionally relied on overt, high-impact attacks, such ransomware, denial-of-service and data breaches that cause immediate disruption and financial loss. But as organisations evolve and mature with their cyber defences, threat actors are adapting, shifting toward more covert tactics. ### A new breed of adversary is emerging: the stealth hacker. These threat actors employ persistent, low-profile tactics designed to quietly infiltrate networks, exfiltrate sensitive data, and remain undetected for extended periods. Their objective is long-term access. By embedding themselves deep within corporate systems, they methodically extract value whether it’s financial assets, credentials or confidential information, all without triggering immediate alarms. In many cases, their presence remains unnoticed for weeks or even months – and by the time they are discovered, the damage is already done. According to [IBM’s Cost of a Data Breach Report 2024](https://www.ibm.com/reports/data-breach), it takes an average of 204 days to identify and 73 days to contain a breach – nearly 9 months of undetected exposure. ## Why mid-market organisations are at risk Research shows that 75% of small to medium-sized businesses do not survive more than six months following a major cyber incident. While large enterprises typically have mature security operations, mid-sized companies often lack the in-house expertise or budget for advanced threat detection and response – making them prime targets. In the 2023–24 financial year, the Australian Cyber Security Centre (ACSC) reported that medium-sized businesses experienced an average financial loss of $62,870 per cybercrime incident. Globally, nearly 61% of mid-sized organisations reported experiencing at least one cyber attack in the last year, according to a recent Accenture report. ## The stealth hacker’s entry point: Business Email Compromise (BEC) Phishing remains the most common initial attack vector, with attackers using highly targeted, socially engineered messages. Spear phishing in which attackers impersonate trusted contacts or suppliers is particularly effective. ### According to the Australian Signals Directorate (ASD), the most frequently reported cybercrimes against Australian businesses include: - 19%: Business email compromise (no financial loss) - 15%: Business email compromise (with financial loss) - 11%: Identity fraud Even without financial loss, unauthorised access through email compromise opens the door for long-term infiltration and reconnaissance – allowing threat actors to monitor and ultimately exploit internal systems. Real-world example: In 2023, NSW property firm LJ Hooker suffered a BEC attack that led to more than $300,000 in fraudulent transactions across multiple clients before detection. More recently, in South Australia, a homebuyer was deceived into transferring $813,000 to a fraudulent account via a spoofed conveyancer email. Only $505,000 was able to be recovered. These incidents reflect the broader shift toward long-dwell, financially motivated intrusions that exploit trust and weak authentication protocols. ## What happens after the breach Once inside, stealth hackers don’t rush. They observe. They map internal systems and organisational workflows, often focusing on finance teams, executives and accounts payable functions. Attackers monitor emails to mimic tone, language and timing – making their fraudulent requests appear legitimate. The goal is not a one-time exploit, but sustained, covert access that enables ongoing fraud or data theft. [Verizon’s 2024 Data Breach Investigations Report](https://www.verizon.com/business/resources/reports/2024-dbir-data-breach-investigations-report.pdf) found that 94% of breaches involving social engineering came via email, with business email compromise accounting for more than 50% of those. ## Security best practices to mitigate threats Too often, security providers like AUCyber are brought in only after a breach. At that point, the focus is on damage control and incident response. Instead, organisations must shift to a proactive, risk-based cyber security posture. For high-value sectors such as financial services, law, property and healthcare, the cost of inaction is simply too high. ## Implementing strategic defences AUCyber works with enterprise and mid-market clients to implement key foundational controls, including: - Enforcing multi-factor authentication (MFA) across all systems, using secure protocols like FIDO2 - Restricting logins by geography and device - Validating system and account permissions regularly - Conducting proactive monitoring and threat detection Crucially, these capabilities are most effective when combined with dedicated cyber expertise. ## The case for 24×7 threat monitoring Continuous monitoring is essential but difficult to maintain in-house for most businesses. Outsourcing this function to a specialist provider is not only more cost-effective but ensures round-the-clock monitoring. AUCyber delivers[ 24×7 Managed Detection and Response (MDR)](/managed-cybersecurity), providing ‘eyes on glass’ to identify and neutralise threats within minutes (not days!) Our team commits to responding to and containing verified threats within 30 minutes, protecting your business before damage escalates. ## Prepare, don’t react Endpoint attacks are becoming more stealthy, more targeted and more damaging. As the attack surface grows, so too must your ability to detect and respond in real time. [Security maturity](/cyber-consulting) isn’t built overnight, but with the right strategy and trusted partners, it’s within reach. When it comes to securing your business, prevention is always more powerful than reaction. --- # AUCyber partners with SentinelOne to advance AI-powered security operations **Published:** 29 September 2025 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/sentinelone-partnership **Source:** https://aucyber.com.au/news/sentinelone-partnership/ The partnership marks a significant step forward in strengthening the cyber resilience of Australian organisations, introducing advanced capabilities in threat detection, analysis and response. --- ### Australian cyber security provider AUCyber has partnered with global technology leader SentinelOne to deliver next-generation endpoint and cloud protection powered by AI-driven SIEM technology The partnership marks a significant step forward in strengthening the cyber resilience of Australian organisations, introducing advanced capabilities in [threat detection, analysis and response](/managed-cybersecurity). This is more than an upgrade - it’s a step forward in how threats are detected, contained, and prevented. By combining behavioural monitoring with a full automation suite, AUCyber’s Security Operations Centre (SOC) team can now respond faster and more effectively to the growing scale and complexity of cyber incidents. AUCyber CEO, Chris Wright, said the collaboration reflects the growing need for Australian businesses to adopt smarter, more adaptive defences as cyber risks become more targeted and disruptive. “Our partnership with SentinelOne represents a major milestone in AUCyber’s mission to protect Australian organisations. By combining SentinelOne’s world-leading AI capabilities with AUCyber’s sovereign operations and expertise, we’re giving businesses the confidence and resilience they need to operate securely and without disruption.,” Mr Wright said. Delivered by the [Australian-based SOC](/managed-cybersecurity), the solution is fully data-resident and meets the highest assurance standards, including IRAP to PROTECTED and ISO 27001 compliance. “SentinelOne is proud to partner with AUCyber to bring next-generation AI-powered security to Australian organisations,” said Keagan Schmitz, Vice President of Channel Sales, Asia-Pacific & Japan at SentinelOne. “By combining AUCyber’s sovereign SOC expertise with our AI-native technology, we are empowering customers with real-time protection across endpoints, identities, and cloud environments. Together, we’re helping businesses meet the highest standards of compliance, strengthen resilience, and stay ahead of today’s most sophisticated threats.” The [partnership](https://www.linkedin.com/feed/update/urn:li:activity:7366273542935490560) will enable AUCyber customers to benefit from real-time monitoring, investigation and response across [endpoints](https://aucyber.com.au/news/role-of-endpoint-security/), identities and cloud environments. By embedding SentinelOne’s AI-native technology into AUCyber’s cyber capability, organisations will be able to rapidly contain and mitigate threats before they escalate. Together, AUCyber and SentinelOne are building smarter, AI-powered cyber resilience to secure Australia’s digital future. --- # Fortify Your Cyber Defence: The Essential Role of Endpoint Security **Published:** 3 September 2025 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/role-of-endpoint-security **Source:** https://aucyber.com.au/news/role-of-endpoint-security/ This is why Endpoint Security is no longer optional – it's become a critical foundation of any modern cyber defence strategy. --- #### Today’s hyper-connected business environment drives innovation, efficiency and growth, but it also creates increased exposure to sophisticated cyber threats. Every device, user and connection point becomes a potential target for attackers seeking to exploit vulnerabilities across the organisation. This is why Endpoint Security is no longer optional – it's become a critical foundation of any modern cyber defence strategy. In an environment where ransomware, data breaches and credential theft are increasingly common, every device becomes a potential point of compromise. Business leaders and IT executives must take a proactive, enterprise-wide approach to securing every endpoint across their digital infrastructure. ## What is Endpoint Security? Put simply, Endpoint Security is a comprehensive set of controls designed to protect all end-user devices. In the past, securing laptops, desktops and servers often meant deploying antivirus or a single EDR solution. However, as both the sophistication of attack methods and the potential impact of compromise have grown, so too has the level of protection required to defend these critical endpoints. Good Endpoint Security goes beyond basic device-level protections. To effectively prevent compromise, security teams must be equipped to respond to alerts, fine-tune detection rules, and actively conduct threat hunting using advanced security tools to look for evidence of compromise. ### Financial Impact The impact of cyber-attacks on inadequately protected mid-sized businesses in Australia is significant. The Australian Cyber Security Centre (ACSC) reported an average financial loss of $62,870 per cyber-crime incident in this sector. While all organisations are susceptible to cyber-threats, mid-sized businesses are increasingly targeted due to their valuable data and often limited security resources. The majority of Australian businesses rely heavily on endpoint devices, such as laptops, servers and mobile devices to operate. Without effective protection in place, these devices become prime entry points for threat actors. Among those at risk, many have stored personally identifiable data, making them a key focus for cyber criminals seeking to exploit data. In addition to financial loss, businesses face heightened regulatory scrutiny and reputational damage in the event of a breach. Such consequences that can have long-term impacts for business continuity and customer trust. ***Shane Miller, Group Executive of Information Security Services shares why Endpoint Security is essential to protecting your business.*** ## Key actions to strengthen Endpoint Security While technology plays a critical role, successful endpoint defence requires both technical controls and disciplined operational practices. Core actions include: - Applying security patches and software updates immediately - Regularly updating and auditing firewall rules - Implementing continuous endpoint monitoring with active threat hunting and ongoing rule tuning. Solutions such as SentinelOne and Microsoft Defender for endpoint provide robust EDR capabilities, but without skilled monitoring and response teams behind these platforms, critical alerts may go unaddressed. Technology alone does not equal security. Skilled, active oversight is essential. ### Preparation, not luck [AUCyber’s approach](/managed-cybersecurity) is rooted in continuous preparation. We combine real-world threat intelligence, ongoing red-team exercises and constant adversarial thinking to identify gaps before attackers can exploit them. Our team actively monitors global threat feeds, analyses emerging attack patterns and conducts simulated breach scenarios. We constantly ask: "If this threat targeted our clients tomorrow, how would we detect it, stop it and recover from it?" By thinking like attackers and defenders simultaneously, we ensure our clients maintain resilience against even the most advanced threats. ### Proven results, industry recognition This proactive approach is why AUCyber was recognised as [Endpoint Security Provider of the Year](https://aucyber.com.au/news/endpoint-security-provider-of-the-year/) at the [2025 Australian Cyber Awards](https://www.cyberdaily.au/australian-cyber-awards/winners/2025-winners-and-finalists). Our clients benefit from enterprise-grade protection, supported by experienced security professionals who remain focused on prevention, detection and response. --- # AUCyber awarded ANZ Marketing Excellence Award for Cyber Resilience Campaign **Published:** 16 June 2025 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/anz-marketing-excellence-award **Source:** https://aucyber.com.au/news/anz-marketing-excellence-award/ The award acknowledges AUCyber’s successful delivery of the Fortifying Australia’s Data Resilience and Security campaign, highlighted by a high-profile industry luncheon at the National Press Club in Canberra. In partnership with Veeam, the… --- ### AUCyber is proud to announce it has won the ANZ Marketing Excellence Award at the 2024 Veeam Partner Awards, hosted at the iconic Sydney Opera House. The awards recognise outstanding partner performance across backup, recovery and data resilience solutions. The award acknowledges AUCyber’s successful delivery of the [Fortifying Australia’s Data Resilience and Security](https://aucyber.com.au/knowledge-base/anz-marketing-excellence-award) campaign, highlighted by a high-profile industry luncheon at the National Press Club in Canberra. In partnership with Veeam, the initiative brought together leading voices across government and industry to address Australia’s evolving cyber threat landscape and drive practical data protection strategies. CEO of AUCyber, Chris Wright, said the award is a reflection of the team's strategic focus on customer outcomes, education and industry leadership. “This recognition from Veeam underscores our commitment to helping Australian businesses build resilience through intelligent backup and security strategies,” Mr Wright said. “Our [partnership with Veeam](/partners) enables us to bring best-in-class technologies and combine them with local expertise to address real threats. We’re incredibly proud of the work our team has done to drive education, awareness and value through our joint initiatives.” The Fortifying Australia’s Data Resilience and Security campaign featured expert panel discussions, in-depth briefings and dedicated resources to equip Australian organisations with the tools and insights to better understand and respond to increasing cyber risks. AUCyber congratulates all winners and finalists recognised at the 2024 Veeam Partner Awards and looks forward to continued collaboration across the [Veeam partner ecosystem](https://www.veeam.com/partners/find-a-partner.html?country=AUS&search=aucyber). --- # AUCyber wins Endpoint Security Provider of the Year **Published:** 12 May 2025 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/endpoint-security-provider-of-the-year **Source:** https://aucyber.com.au/news/endpoint-security-provider-of-the-year/ The annual Australian Cyber Awards recognise excellence across the full spectrum of cyber security - highlighting not only products, but also the people and organisations leading the charge in innovation and digital protection across governme… --- ### Australian cyber security provider AUCyber has been awarded Endpoint Security Provider of the Year at the [2025 Australian Cyber Awards](https://www.cyberdaily.au/culture/12022-winners-announced-for-australian-cyber-awards-2025), recognising its cutting-edge approach to protecting businesses from modern digital threats. The annual Australian Cyber Awards recognise excellence across the full spectrum of cyber security - highlighting not only products, but also the people and organisations leading the charge in innovation and digital protection across government, enterprise and critical sectors. AUCyber was a standout in this year’s awards, securing five finalist nominations, more than any other organisation, and taking home the prestigious Endpoint Security category in recognition of its sovereign, expert-led approach to endpoint protection. CEO Chris Wright said the award reflects the company’s strategic focus on helping Australian organisations defend against increasingly sophisticated endpoint threats. “We’re incredibly proud to be recognised as [Endpoint Security Provider](/managed-cybersecurity) of the Year. This award reflects AUCyber’s commitment to delivering responsive, adaptive cyber security services to Australian businesses and government agencies,” Mr Wright said. “It’s also a testament to our dedicated team of Australian-based security experts and our ongoing investment in technologies that protect the most vulnerable areas of our customers’ environments.” “As AI adoption accelerates and cyber threats become more targeted, endpoint security has become essential to business resilience. At AUCyber, we’re focused on staying ahead of emerging threats, delivering solutions that empower organisations to operate with confidence in a digital-first world.” ***Pictured: The AUCyber team proudly celebrating the win at the 2025 Australian Cyber Awards Gala in Ilumina, Sydney.*** With five finalist nominations across categories including [Security Operations Centre (SOC) Provider](/managed-cybersecurity) of the Year and Ransomware Protection Business of the Year, AUCyber continues to lead in securing Australia's digital economy. In 2024, AUCyber took home both awards and was again recognised in 2025 for its customer impact and cyber capability. “With cyber threats growing in scale, we’re committed to setting a higher standard for cyber security across all sectors,” said Mr Wright. “Our suite of managed cyber security services are built to meet the urgent need for proactive cyber protection - helping Australian businesses safeguard their operations, customer data and critical information in real time.” #### This year, AUCyber was also a finalist for the following awards at the Australian Cyber Security Awards: - **Security Operations Centre (SOC) Provider of the Year** - **Cloud Service Provider of the Year** - **Research Institution of the Year** - **Ransomware Protection Business of the Year** --- # World Backup Day: The one mistake that could cost you everything **Published:** 31 March 2025 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/world-backup-day-2025 **Source:** https://aucyber.com.au/news/world-backup-day-2025/ Today, on World Backup Day 2025, it’s the perfect opportunity to pause and reflect on the state of your business’s data resilience. --- Today, on [World Backup Day 2025](https://www.worldbackupday.com/en), it’s the perfect opportunity to pause and reflect on the state of your business’s data resilience. In an era where AI-driven automation and cloud computing power everyday operations, data has become an organisation’s most valuable asset. Yet, with cyber threats, accidental deletions and system failures on the rise, too many businesses still lack a comprehensive backup and recovery plan. The question is: if disaster struck tomorrow, would your business be able to recover? ## Why backups are no longer optional With the average cost of a data breach climbing into the millions and ransomware attacks increasing, data loss is no longer just an IT problem – it’s a business continuity risk. A single failed backup or missing restore point can mean downtime, regulatory fines and reputational damage. Worse, in the age of AI-powered threats, attackers now actively target backup systems, rendering traditional security measures ineffective. So, what can businesses do to protect their most critical asset – data? ## 5 must-follow backup practices to protect your business data - ### Follow the 3-2-1 backup rule - 3 copies of your data - 2 different media types (e.g. cloud + on-prem) - 1 copy offsite - ### Automate and encrypt backups Manual backups are prone to human error. Implement automated, encrypted backups to reduce risk and ensure data remains uncompromised. - ### Test, test and test again A backup is only as good as its ability to be restored. Conduct regular disaster recovery drills to confirm that backups are functional and accessible when needed. - ### Protect against ransomware and insider threats Cyber criminals now target backups before launching ransomware attacks. Ensure immutable storage, air-gapped backups and access controls are in place to prevent unauthorised modifications. - ### Ensure compliance and retention policies are up-to-date From financial records to client data, different industries have varying compliance requirements for data storage and retention. Make sure your backup strategy aligns with legal and regulatory obligations. ## Why these backup best practices matter Overall, embracing these enhanced backup strategies is critical for organisations seeking to stay competitive. As businesses increasingly operate in hybrid and multi-cloud environments, the need for effective backup strategies has become more than just a compliance issue - it’s a business-critical necessity. World Backup Day serves as a timely reminder that investing in data resilience today is key to protecting against the evolving technological and cyber security challenges of tomorrow. ## AUCyber: Your trusted partner in data security We help businesses implement resilient, secure and compliant backup solutions that withstand modern day cyber threats. Don’t wait until it’s too late – use World Backup Day as your reminder to protect what matters most. [Our services](https://aucyber.com.au/solutions/) include: - ### Comprehensive backup solutions [Protecting your business data](https://aucyber.com.au/backup/) with reliable, rapid recovery capabilities. - ### Disaster recovery solutions Fast and [reliable data recovery](https://aucyber.com.au/disaster-recovery/) planning to ensure quick restoration of data and minimal downtime. - ### Cloud compute & storage solutions Scalable and [secure cloud infrastructure](/cloud-services) for [reliable data storage](/cloud-services) and seamless performance. - ### M365 backup solutions [Backup and recovery for Microsoft 365](https://aucyber.com.au/m365-backup/), ensuring business continuity and data protection. - ### 24/7 cyber security monitoring [Round-the-clock protection](/managed-cybersecurity) and [expert assistance](/managed-cybersecurity) to secure your business from emerging threats. Need expert guidance on backup strategy, disaster recovery or ransomware resilience? [Contact us](https://aucyber.com.au/contact-us/) today. --- # PSA: Experts Warn of Rising Scams as Cyclone Alfred Cleanup Begins **Published:** 18 March 2025 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/psa-cyclone-alfred-scams **Source:** https://aucyber.com.au/news/psa-cyclone-alfred-scams/ AUCyber CEO Chris Wright said it was a sad reality that whenever there was hardship, scammers usually weren’t too far behind. --- #### As the cleanup begins following the devastation of Cyclone Alfred across South East Queensland and Northern New South Wales, cyber security experts are urgently warning the public to remain vigilant against a surge of online scams preying on victims in the aftermath of the disaster. AUCyber CEO Chris Wright said it was a sad reality that whenever there was hardship, scammers usually weren’t too far behind. “We don’t want to see any more pain for people who have already suffered enough,” said Mr Wright. “Scammers are the lowest of the low and will take any opportunity to prey on people when they are at their most vulnerable - with their guard down, easy to scam.” 00:00 - ***Listen to an extract of Rafe Berding, AUCyber's Chief Corporate Affairs Officer on the [4BC Afternoons](https://www.4bc.com.au/podcast/full-show-4bc-afternoons-with-peter-psaltis-filling-in-for-sofie-formica-march-14th-2025/) podcast.*** ### Top Scams to Watch Out for as the Cleanup Begins - #### Unannounced Contractors and Repair Scams Fraudsters may show up at cyclone-affected properties, posing as contractors or insurance representatives. These scammers may offer to carry out quick repairs for an upfront payment but will disappear with the money and never complete the work. - #### Phishing Emails Cybercriminals may impersonate insurers, sending emails claiming to verify or update your personal information. These emails can trick victims into revealing sensitive data, such as bank account details, personal identification numbers, or MyGov credentials, which can be used for identity theft. - #### Fake Donation Campaigns Fraudulent pages claiming to raise money for cyclone victims often emerge across social media platforms, where donors are unknowingly funding criminal enterprises rather than legitimate relief efforts. - #### Impersonation of Government and Relief Agencies Scammers may pose as representatives from organisations like the Australian Red Cross, Centrelink, or the Government, offering emergency assistance or housing and asking for sensitive information like Medicare numbers or bank account details. ### AUCyber's Top 8 Tips to Protect Yourself During the Cleanup - #### Unannounced Contractors and Repair Scams Fraudsters may show up at cyclone-affected properties, posing as contractors or insurance representatives. These scammers may offer to carry out quick repairs for an upfront payment but will disappear with the money and never complete the work. - #### Phishing Emails Cybercriminals may impersonate insurers, sending emails claiming to verify or update your personal information. These emails can trick victims into revealing sensitive data, such as bank account details, personal identification numbers, or MyGov credentials, which can be used for identity theft. - #### Fake Donation Campaigns Fraudulent pages claiming to raise money for cyclone victims often emerge across social media platforms, where donors are unknowingly funding criminal enterprises rather than legitimate relief efforts. - #### Impersonation of Government and Relief Agencies Scammers may pose as representatives from organisations like the Australian Red Cross, Centrelink, or the Government, offering emergency assistance or housing and asking for sensitive information like Medicare numbers or bank account details. - #### Don’t Be Pressured into Quick Contracts Avoid signing contracts under pressure, especially in the aftermath of a disaster. Take the time to read and understand any agreement. - #### Check the Sender’s Email Address Ensure any email communication claiming to be from your insurer is legitimate by verifying the sender’s email address. - #### If in Doubt, Contact Your Insurer Directly If you are uncertain about an offer or email, contact your insurer directly using known contact details to confirm its legitimacy. - #### Report Suspicious Activity If you suspect a scam, report it to ScamWatch (Australia). Awareness is key to preventing further exploitation. “The recent 2025 LA wildfires showed us just how quickly cybercriminals can exploit a disaster. Fraudulent charity campaigns, phishing schemes, and fake contractors were launched in the chaos, preying on the vulnerability of both victims and donors,” Mr Wright said. --- # AUCyber named five-time finalist in 2025 Australian Cyber Awards **Published:** 12 March 2025 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/2025-australian-cyber-awards **Source:** https://aucyber.com.au/news/2025-australian-cyber-awards/ The annual Australian Cyber Awards celebrate excellence in cyber security, recognising top individuals and businesses driving innovation and resilience across the industry. Unlike traditional product-focused awards, these accolades acknowle… --- #### Australian sovereign cyber security provider AUCyber has been recognised for its industry-leading expertise, securing five finalist nominations in the 2025 Australian Cyber Awards - more than any other organisation. The annual Australian Cyber Awards celebrate excellence in cyber security, recognising top individuals and businesses driving innovation and resilience across the industry. Unlike traditional product-focused awards, these accolades acknowledge all cyber security stakeholders in the industry – from defence, insurance, cloud services, and technology through to those working in STEM, consultancy, and ransomware protection. More than 200 individuals and businesses have been shortlisted for the awards, which will be held in Sydney on Tuesday 29 April. CEO Chris Wright said AUCyber was truly honoured to be nominated and shortlisted in more categories than any other company. “This recognition reflects the hard work and dedication of our team who are committed to keeping Australians safe through our cyber security and data resilience solutions,” said Wright. “AUCyber is at the forefront of securing Australia’s digital economy, combining cutting-edge technology, expert Australian security professionals, and managed cloud and data protection solutions to deliver unmatched security and data services.” AUCyber won the SOC Provider of the Year and Ransomware Protection Business of the Year categories [in 2024](https://aucyber.com.au/knowledge-base) and is in the running for back-to-back recognition. ### AUCyber is a finalist in the following categories: - #### Security Operations Centre (SOC) Provider of the Year - #### Cloud Service Provider of the Year - #### Endpoint Security Provider of the year - #### Research Institution of the Year - #### Ransomware Protection Business of the Year Cyber Daily editor Liam Garman extended his congratulations to finalists saying it’s an absolute pleasure to have the opportunity to applaud the cyber security sector’s best and brightest. “All of our finalists have done an amazing job, not just transforming the industry, but also keeping Australian organisations safe online,” Garman said. AUCyber specialises in providing organisations of all sizes with the latest managed [cyber security solutions](/managed-cybersecurity), [cloud services](/cloud-services) and [managed IT support](/managed-it). CEO Chris Wright said the award nominations highlight the strength of AUCyber’s [solutions](https://aucyber.com.au/solutions/). “With cyber threats increasing daily, this industry recognition is a testament to the trust and respect of our peers,” Wright said. For the full list of finalists, visit Cyber Daily's Australian Cyber Awards [2025 Winners & Finalists](https://cyberdaily.au/australian-cyber-awards/winners/2025-winners-and-finalists) page. --- # AUCyber welcomes new board leadership **Published:** 12 February 2025 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/welcomes-new-board-leadership **Source:** https://aucyber.com.au/news/welcomes-new-board-leadership/ This week, we welcomed Joseph Demase as our new Chairman and Chris Wright as our new CEO, along with an updated Board of Directors. Their combined expertise and strategic vision will guide AUCyber’s next phase of growth, strengthening our a… --- #### AUCyber announces new leadership reinforcing our commitment to delivering cutting-edge cyber security, sovereign cloud, and data resilience solutions to Australian organisations. ### Appointment of New Leadership **Joseph Demase** Chairman **Hugh Robertson** Non-Executive Director **Conrad Morgan** Non-Executive Director **Chris Wright** Chief Executive Officer This week, we welcomed [Joseph Demase](https://aucyber.com.au/about/joseph-demase/) as our new Chairman and [Chris Wright](https://aucyber.com.au/about/chris-wright/) as our new CEO, along with an updated [Board of Directors](/about). Their combined expertise and strategic vision will guide AUCyber’s next phase of growth, strengthening our ability to deliver world-class cyber security solutions and drive innovation in sovereign cloud and data resilience. ### New Substantial Shareholder Recently we announced and welcomed [5G Networks (5GN)](https://5gnetworks.au/), a publicly listed Australian technology company, as a substantial shareholder in AUCyber (CYB). This development helps further strengthen our organisation and represents continued commitment to deliver cutting-edge cyber security, sovereign cloud and data resilience solutions to our customers. ## A Commitment to Award-winning Excellence It is business as usual for our operations, solutions and our expert teams; we are fully committed to continuing to deliver the highest-quality services, backed by robust service level agreements and a team of highly skilled professionals. ### Discover why AUCyber is Australia’s trusted partner for cyber security, sovereign cloud, and data resilience solutions: - #### [Cyber Security Solutions](/managed-cybersecurity) Our Managed SOC, GRC services and advanced end-to-end cyber security solutions and consulting services offer unparalleled protection to help organisations not only detect and respond to threats but stay ahead of the most sophisticated cyber risks. - #### [Data Resilience Services](https://aucyber.com.au/backup/) With the latest backup and disaster recovery technologies and partners, we ensure the highest levels of data protection, rapid response, and unmatched resilience to keep your operations secure in the face of disruption. - #### [Cloud Services](/cloud-services) Offering the most secure and reliable sovereign cloud storage, backup, and resilience solutions, specifically designed to meet Australia’s unique regulatory and operational needs. - #### [Managed IT Services](/managed-it) Our comprehensive Managed IT Services provide proactive support, streamlined operations, and enhanced security for your IT infrastructure, helping you optimise performance and reduce operational risk. Discuss your needs today with AUCyber expert [here](https://aucyber.com.au/contact-us/) or by phoning **1800 282 568**. --- # Rising Consumer Spending and Cyber Crime **Published:** 18 December 2024 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/rising-consumer-spending-cyber-crime **Source:** https://aucyber.com.au/news/rising-consumer-spending-cyber-crime/ In this segment, AUCyber joins Morning with Graeme Goodings on FIVEAA to discuss how rising consumer spending and Australia's wealth are fuelling cyber criminals' focus on the country. --- ## Rafe Berding talks threats to Australians on FIVEAA. In this segment, AUCyber joins Morning with Graeme Goodings on FIVEAA to discuss how rising consumer spending and Australia's wealth are fuelling cyber criminals' focus on the country. ### Listen to an extract from the program below: 00:00 - ***Source: **[Mornings with Graeme Goodings](https://omny.fm/shows/mornings-with-graeme-goodings)* --- # Protecting Yourself from Cyber Crime **Published:** 18 December 2024 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/protecting-yourself-from-cyber-crime **Source:** https://aucyber.com.au/news/protecting-yourself-from-cyber-crime/ In this segment, AUCyber joins 3AW Weekend Break as Chief Corporate Affairs Officer Rafe Berding shares the latest advice on protecting against cyber criminals. --- ## AUCyber joins 3AW Weekend Break with the latest advice. In this segment, AUCyber joins 3AW Weekend Break as Chief Corporate Affairs Officer Rafe Berding shares the latest advice on protecting against cyber criminals. ### Listen to an extract from the program below: 00:00 - ***Source: **[3AW Weekend Break](https://www.3aw.com.au/show/weekend-break/)* --- # Australia’s Scamming Crisis **Published:** 18 December 2024 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/australias-scamming-crisis **Source:** https://aucyber.com.au/news/australias-scamming-crisis/ In this segment, AUCyber joins ABC Radio to discuss why Australia is one of the most scammed countries in the world. Rafe Berding discusses with Narelle Graham the rising tide of scams, from reward points fraud to phishing schemes, as more… --- ## Rafe Berding discusses rising cyber threats on ABC Radio. In this segment, AUCyber joins ABC Radio to discuss why Australia is one of the most scammed countries in the world. Rafe Berding discusses with Narelle Graham the rising tide of scams, from reward points fraud to phishing schemes, as more Australians move their lives online. ### Listen to an extract from the program below: 00:00 - ***Source: **[ABC Radio SA Regional Drive](https://www.abc.net.au/listen/programs/sa-regional-drive)* --- # Online hackers targeting children on popular online games **Published:** 16 December 2024 **Category:** News **URL:** https://aucyber.com.au/knowledge-base/hackers-targeting-children **Source:** https://aucyber.com.au/news/hackers-targeting-children/ Rafe shared eye-opening statistics into the latest trends and revealed how children are becoming prime targets for cybercriminals. Watch the full feature below to learn how to better protect you, your family and your data online. --- ### AUCyber Chief Corporate Affairs Officer Rafe Berding recently joined 7NEWS Australia to shed light on the rising threat of cybercrime in Australia, especially the alarming surge in online shopping scams. Rafe shared eye-opening statistics into the latest trends and revealed how children are becoming prime targets for cybercriminals. Watch the full feature below to learn how to better protect you, your family and your data online.