The OAIC recorded 1,205 notifiable data breaches in 2025, the highest since the scheme began. The number that matters isn’t the headline. It’s the 489 that weren’t attacks.
Category: Articles
ISO Templates vs a Real Management System: Do Templates Work?
ISO templates and toolkits promise a shortcut to certification. They can help, but a downloaded template isn’t a management system. Here’s where they help and where they hurt.
The Uninvited Guest: Why You Should Never Let Bots Auto-Join Your Meetings
Outlook autocompletes scott@unwanted.com instead of scott@mycompany.com. The stranger’s AI notetaker joins on their behalf, and records the lot. How it happens, and the Teams setting that stops it.
ASD Wants Critical Infrastructure Isolated for 3 Months. What If You Supply It?
ASD asks critical infrastructure operators to run isolated for three months. If you supply them, your access is cut first. What it means for ISO 27001.
When Your Failover Fails: Business Continuity and the Mobile-Outage Trap
Most business continuity plans nominate mobile as the failover when the primary connection drops. Today’s nationwide Telstra outage showed why that’s a hidden single point of failure, and what a real BCP does about it.
Microsoft Launches Defender Experts Suite: What It Means for Australian Businesses
Microsoft’s Defender Experts Suite is a managed detection and response (MDR) service: in plain terms, Microsoft’s own security analysts watching your environment and hunting for threats using the signals your Microsoft 365 and Defender licences already generate. For the many Australian businesses running on Microsoft but without a 24/7 security team, it’s a genuinely useful […]
Quality Quote: “Give Your People Better Processes and Get Better Performance From Your People”
“Give your people better processes and get better performance from your people.” Author unknown. Don’t blame the person, blame the process. I’ve lost count of the number of audits I’ve walked into where a manager tells me, in the first ten minutes, that their real problem is “people not doing their job.” Then we go […]
Awareness Is a Behaviour, Not a Slide Deck: Simulated Phishing and Clause 7.3
Ask most businesses how they handle security awareness and you will hear the same answer: an annual slide deck and a quiz nobody remembers by lunchtime. It ticks a box. It changes almost nothing. When a well-crafted phishing email lands three months later, the slide deck is not in the room. The habit is, or […]
NSW Codes of Practice Are Now Enforceable: What the 1 July 2026 Duty Means for You
On 1 July 2026 a quiet but significant change took effect in New South Wales. Codes of practice, which for years sat in the background as “guidance”, became something much closer to law. If you run a business in NSW, the practical question has shifted from “have we had an incident?” to “can we show […]
What Happens When All Your AI Agents Call in Sick?
Claude reliability incidents highlight a new continuity risk: what happens when business-critical AI agents and their underlying providers become unavailable?
