Plain-English I.T. and cyber security advice for Australian businesses.
Practical guides from Shane and the Black Wolf team on ASD Essentials (Essential Eight), Microsoft 365, scams, compliance and choosing an I.T. provider. No jargon, no fear-mongering.
ASD Essentials: what the Essential Eight's successor means for you
ASD has released the Essentials series to succeed the Essential Eight. What changed, why the Essential Eight still applies for now, and what to do this year.
5 min read →Cyber securityThe Essential Eight explained for small businesses
The eight mitigation strategies, what Maturity Level One to Three actually mean, and a practical order for a small business to work through them.
5 min read →IndustriesNQF digital technology changes: what they mean for your service
What changed under the NQF from 1 September 2025 and 27 February 2026 for digital technology, devices and images of children, and the I.T. a small service needs to comply.
5 min read →IndustriesAn I.T. checklist for GP and allied health practices
A plain-English I.T. checklist built from the RACGP information security guidance and Criterion C6.4, plus what the Notifiable Data Breaches scheme expects of health providers.
4 min read →ComplianceAfter a data breach: the NDB scheme in plain English
Who the Notifiable Data Breaches scheme covers, how the 30-day assessment works, and how to notify the OAIC and affected people, step by step.
5 min read →Cyber securityHow to spot a fake invoice or bank-change email before you pay
Fake invoices and changed bank details emails cost businesses real money. Here are the warning signs, a call-back process your accounts team can follow, and what to do if the money has already gone.
5 min read →Cyber securityWhat to do in the first hour after a ransomware attack
The first hour after ransomware hits decides how bad the damage gets. This is the step-by-step plan to follow, based on ASD guidance, from the ransom note to your privacy obligations.
4 min read →Microsoft 365MFA for small business: which kind to use and why
Not all multi-factor authentication is equal. This guide ranks the common types, explains phishing-resistant MFA, and covers Microsoft's move to passkeys and away from SMS.
4 min read →Cyber securityLost or stolen work phone: a 10-minute checklist
For trades and mobile staff, a lost phone means lost access to email, jobs and client details. This checklist covers the first 10 minutes, from remote lock to deciding whether it is a notifiable breach.
5 min read →Microsoft 365Does Microsoft back up your Microsoft 365 data?
Microsoft runs a resilient service, but recycle bins and retention windows are not a backup. Here are the real limits and what a proper Microsoft 365 backup looks like.
5 min read →Switching & buyingHow to switch I.T. providers without downtime
A practical handover plan for changing I.T. providers: what to collect before you give notice, the order to do things in, and the questions that prevent surprises.
4 min read →Switching & buyingWhat to check in a managed I.T. agreement before you sign
A clause-by-clause checklist for reviewing a managed I.T. agreement, so you know what you are paying for and how to leave if it does not work out.
4 min read →ComplianceAnswering a cyber insurance questionnaire honestly
Cyber insurance forms ask about MFA, backups, patching, endpoint protection, email security and training. Here is how to answer accurately and fix gaps before renewal.
4 min read →
Want it all in one place?
The Cybersecurity Essentials Guide covers the basics every Australian business should have in place.
Find out where you're exposed before someone else does.
Book a free 20-minute risk check with Shane. You'll get a plain-English list of your three biggest gaps, whether you sign with us or not.
How exposed is your business? Find out in 2 minutes.
12 yes-or-no questions based on ASD Essentials (Essential Eight). Instant grade and your top three risks, free. No email needed to see your score.
Get my free cyber risk score →