Cyber security
Security that lets everyone sleep at night.
Assessment, protection, detection and recovery, delivered in plain English by people you can actually call. For organisations that want to be safe, not scared.
The whole job, in order
Four layers, none optional.
Good security is not one product. It is four disciplines working together, built in the right order and reviewed on a rhythm.
Assess
A clear-eyed look at where you stand: what you hold, where it lives, who can reach it, and what would hurt most if it stopped. Reported in plain English, ranked by risk.
Start with the Security CheckProtect
Identity, devices, email and network hardened in the right order. Multi-factor everywhere it matters, patching that actually happens, backups that actually restore.
Detect
Monitoring that watches while you sleep. Unusual sign-ins, ransomware behaviour and data movement flagged and acted on, not discovered later.
Recover
Tested backup and continuity, so the worst day is a bad week, not a closed business. Recovery rehearsed before it is ever needed.
No fear, no jargon
Security you can explain to your Board.
Most cyber pitches are written to frighten you. Ours are written so the person who signs the budget understands exactly what they are buying and why.
- Risk explained in business terms, never in acronyms
- A prioritised plan: what to fix first and why
- Reporting your Board or Council can read unassisted
- No fear-selling. If something is fine, we say it is fine
For schools
In a school, cyber security is safeguarding.
A school network holds what a corporate network never will: children’s identities, images and family details. We secure it to that standard, and we report on it in language a School Board understands.
- Student records, health notes and family details held to a higher duty of care
- Image libraries and publishing workflows kept inside the school's control
- Classroom cameras and devices configured privacy-first, early childhood included
- Staff shielded from phishing and impersonation, term time and holidays alike
After the fix, the watch
Security is a rhythm, not a project.
The organisations that stay safe are the ones where someone keeps watching. Our managed services carry the security load month after month: monitoring, patching, backup checks and a reporting rhythm that shows the work.
See how managed services work27001
Held to the standard we build for you
Certified to ISO/IEC 27001:2022.
Our information security management system is certified by Intertek (certificate 0223646, valid to 31 August 2028). The way we handle your data, access and incidents has been audited against the international standard by an independent certifier.
Guides
Answers to the questions behind a security decision.
Choosing an adviser, what the Essential Eight asks of you, when managed security makes sense and how to make sure backups survive ransomware, in plain English.
Questions we hear
What people ask before they start.
Where should we start with cyber security?
With an honest look at where you stand. The three-minute Security Check gives you a result on screen straight away, and if it turns up gaps we offer a free security audit with a senior technician, ranked by what to fix first.
Is SCCS certified?
Yes. SCCS is certified to ISO/IEC 27001:2022 by Intertek (certificate 0223646, valid to 31 August 2028). The certificate covers how we manage information security in our own business, which is the standard we bring to yours.
What is the Essential Eight?
A set of eight mitigation strategies published by the Australian Signals Directorate: application control, patching applications, Microsoft Office macro settings, user application hardening, restricting administrative privileges, patching operating systems, multi-factor authentication and regular backups. Each is measured against maturity levels from zero to three.
Do you monitor systems after the fixes are in?
Yes. Through managed services we keep watching: unusual sign-ins, ransomware behaviour and data movement are flagged and acted on, with patching, backup checks and a reporting rhythm that shows the work.
Can you help with backup and recovery?
Yes. We set up backup that is tested by restoring rather than by hoping, including independent backup of Microsoft 365, and we rehearse recovery before it is needed.
Is cyber security different for schools?
The controls are similar; the stakes are not. A school holds children's identities, images and family details, so we secure it to that standard and report on it in language a School Board can read.
Free download
The School IT & Cyber Readiness Checklist
A practical, plain-English guide for school business managers. Ten minutes to see exactly where you stand, and what to fix first.
- The 12-point readiness self-assessment
- The questions your Board will ask after a breach
- A one-page plan you can action this term
Ready when you are
Find out where you stand.
Forty-five minutes with someone senior. We map what you have, what is exposed, and what to fix first, ranked and in plain English. No obligation, no fear-selling.