Cyber security answers for Australian firms
Could you answer your insurer’s cyber questions today?
When your insurer, a client or a tender asks how you protect their data, you need the answer and the proof. The form often arrives before renewal, gets forwarded, and comes back incomplete. Founding member places are limited, and the price is locked in.
In 2024–25, the average self-reported cost of cybercrime per report for a small business was A$56,600. ASD Annual Cyber Threat Report 2024–25.
Not ready to join? Take the Free 10-minute check and see whether you could answer those questions today.
18
Confirmed
4
Need a check
5
Actions open
- Identity and access7 of 9
- Devices4 of 7
- Backups and data2 of 5
- Administration5 of 6
Next action
Turn on multi-factor authentication for the two remaining staff
Owner: your IT provider
Evidence due for another look: backup restore test
How it works
Start with one question.
Do your staff use multi-factor authentication?
If you’re unsure, see where to check or what to ask your IT provider. Record what you find, give any follow-up an owner, and keep the proof once it’s checked. Answer once and it counts for your insurer, your clients and the Essential Eight.
The question, as the platform asks it
Is multi-factor authentication required for all staff?
A code, app prompt or security key as well as a password, every time someone signs in from somewhere new.
- Yes
- Partly
- No
- Not sure
- Ask my IT provider
Not sure is a fine answer. It is never counted as a failure. The item is marked as needing a check, and you get the steps to find out.
The question, the checking steps and the framework links come from the platform itself. The action and evidence cards are illustrations of the interface.
Three ways to work with Cyber Guys.
Start with the platform on its own. Add hands-on help or staff training when you want them. Each is bought separately.
Compliance Platform
Subscribe to manage your requirements, actions and evidence with your own team or IT provider.
Done-for-You Cyber
Get agreed security changes made and verified, with a clear record of the work.
User Awareness Training
Give staff practical lessons and realistic practice spotting and reporting suspicious requests.
After the first assessment
Keep your security program moving throughout the year.
See what’s been completed, what’s still open and what needs another look. When your systems change or someone asks for evidence, you have a record of the work and a clear place to pick it up again.
People join and leave
New starters need accounts set up properly and training assigned. Leavers need their access removed, and a record that it was.
Systems change
A new app, a new device or a settings change can reopen a question you answered months ago. Update the answer and the follow-up appears.
Actions get finished
Each completed action moves your program forward and stays on the record, with who did it and when.
Evidence needs refreshing
Some controls are worth checking again each quarter. You can see what is due for another look before someone asks.
Renewals and reviews come round
Insurance renewals, client security questionnaires and board reports arrive every year. Start from what you already have, not from a blank page.
Already have an IT provider?
The platform gives you both the same list.
Your IT provider does the work. You’re the one who signs the insurer’s form. Send them the questions only they can answer, let them confirm the technical items, and keep the result where you can find it next time someone asks.
Need the work done for you?
Done-for-You Cyber is a separately scoped service. We agree what to fix, make the approved changes or coordinate them with your IT provider, verify the result and record the evidence in your platform.
Scope a cyber projectFind your starting point.
Businesses
Run your own program with your team or IT provider. Add hands-on help or training when you need it.
Internal IT and risk teams
A shared record of controls, actions and evidence, with delivery capacity for specific projects.
MSPs and IT providers
Manage cyber compliance across your clients, with your own team.
Insurance brokers
Offer co-branded cyber readiness under your name — free to start.
Questions we hear before a firm joins
Three things firms say before they look at the platform. The short answers:
Lock in a founding member place.
Tell us your firm, your renewal month and how many people you have. We will confirm the place and the price, then set you up. Or book a demo if you want to see a guided question first.