IT compliance support, with the evidence to back it
Insurers, clients, tenders and Defence all ask for security evidence, often against different frameworks. We work out which ones apply to you, close the gaps once and keep the evidence for all of them.
Your price in two minutes, no email needed. Or call 1300 787 429.
Not sure where you stand? Take the five minute scorecard.
★★★★★ 4.9 on Google from 60+ reviews
- ISO27001 and 9001 certified, audited externally
- 5SMB1001 certification levels, from Bronze to Diamond
- 150+Organisations protected by Austin SecureShield
- $25SecureShield Core from $25 per person per month ex GST
Trusted by 300+ organisations, including
Compliance usually arrives as someone else's deadline
Few small businesses choose a framework for its own sake. One of these usually starts the conversation.
Your insurer's proposal form got longer
Renewal forms ask about MFA, backups, endpoint protection and incident response. The answers need to match what is really in place.
FixAnswers checked against your real settings and gaps closed before the renewal date.
A client sent a security schedule
Enterprise and government clients pass their own obligations down to suppliers, often with a named framework and a deadline.
FixControls mapped to what the client asked for, with evidence you can attach to your reply.
A tender asks for SMB1001 or ISO 27001
A certificate can decide whether you make the shortlist, and preparing for one takes planning.
FixA realistic path to the level or certificate asked for and evidence you can use while you get there.
You want to work with Defence
Defence asks DISP members to meet or exceed Essential Eight Maturity Level 2 on the corporate systems they use to correspond with Defence.
FixDISP readiness that starts with the cyber controls, because they usually take the longest.
Tell us who is asking about your security. A technical consultant will scope it with you and send a fixed quote. Or take the scorecard to see where you stand first.
The frameworks you are asked to meet and how we help
Most of these ask for the same core controls in different language. We build the controls once and map the evidence to each framework you need.
| Framework | What it is | How we help |
|---|---|---|
| Essential Eight | ASD's eight mitigation strategies, measured in maturity levels. Often named by insurers, government and resources clients | Assessment and uplift to ML1 or ML2, then maintained through SecureShield |
| SMB1001 | A cybersecurity certification standard for small and medium businesses, with five levels from Bronze to Diamond | Control aligns to the Gold tier and Command to the Diamond tier. We prepare the evidence and an independent certifying body issues the certificate |
| ISO/IEC 27001 | The international standard for an information security management system, certified by an external auditor | Readiness work on controls, policies and evidence. We hold the certificate ourselves |
| DISP | Defence's security scheme for its supply chain, covering governance, personnel, physical and cyber security | The ICT and cyber controls to Essential Eight ML2 and the evidence behind them |
| Cyber insurance | Proposal forms that ask how you protect accounts, devices and backups | Answers checked against your settings and gaps closed before renewal |
| Incident reporting | Assess a suspected data breach within 30 days and notify eligible breaches, and report a ransomware payment to ASD within 72 hours if turnover is over $3 million | Logging and an incident response plan, so reports can be made on time |
Swipe the table sideways to see every column.
We handle the technical controls and the evidence. Legal interpretation of any obligation sits with your advisers.
From first review to audit day
Each part links to a deeper page if you already know what you need.
Find out where you stand
A security review of Microsoft 365, devices, email and backups, scored against the Essential Eight, so you know your starting point.
Cyber security audit, risk register and plan
Reach an Essential Eight maturity level
The eight strategies explained and the path from where you are to ML1 or ML2, without stopping your team working.
Gap assessment, ML1 and ML2
Get ready for DISP
ML2 on the systems you use with Defence, plus the documents and evidence your application needs.
Defence suppliers, ML2 and evidence
Run the controls every day
SecureShield keeps detection, application control and training running, with regular reviews of your score.
Core, Control and Command
Train your people
Short training and phishing simulations, with completion records you can show an auditor.
Training, phishing simulation and records
One set of controls, mapped to what you need
You get a clear order of work and a fixed price before anything starts.
- 01
Gap review
We confirm which frameworks apply to you, what you already have and what is missing, including any insurer or client questionnaire.
- 02
Plan and fixed quote
Gaps in order of risk and deadline, with a fixed quote for project work and a monthly price for ongoing controls.
- 03
Controls and policies
Technical controls rolled out in stages, with policies written to match how your business works.
- 04Ongoing
Evidence and review
Evidence kept current for each framework and regular reviews so nothing drifts before your next renewal or audit.
Which SecureShield plan supports which framework
Each plan builds on the one before, so you can start where you are and step up when a contract asks for more.
| Framework support | CoreSecurity operations | ControlVisibility and governance | CommandStrategy and vCISO |
|---|---|---|---|
| Essential Eight maturity level maintained | ML1 | ML2 | |
| SMB1001 alignment | Gold tier | Diamond tier | |
| Centralised security event logging (SIEM) | |||
| Incident response plan, tested yearly | |||
| Ongoing vCISO and board ready reviews | |||
| Price | $25 per person per month ex GST | $60 per person per month ex GST | $100 per person per month ex GST |
Swipe the table sideways to see every column.
Control adds a monthly security report, and Command adds quarterly reviews with a virtual CISO. Compare SecureShield plans.
A top 50 MSP in Australia, three years running
Rated by our clients on Cloudtango, and audited every year on security, quality and cyber controls.
Top 50MSPs in Australia
- 2024
- 2025
- 2026
Ranked on client satisfaction and service depth.
Read our 25 client reviews on Cloudtango
ISO 27001
Information securityHow we handle your data, passwords and access, audited every year.
How we protect your data
ISO 9001
Quality managementDocumented processes, so every engineer works to the same standard.
How we work
SMB1001 Gold
Cyber security, Level 3The 27 control cyber standard we take clients through, held ourselves.
Check our certificate- Our own standard
Certified ourselves
Austin Technology is certified to ISO/IEC 27001 and ISO 9001, audited externally by Compass Assurance Services. We know what an auditor asks for because we answer it too.
- Professional services
Palisades
Controls and governance documents aligned to Essential Eight ML1 met a prospective client's security requirements and won the partnership.
- Engineering
Powertech
Aligned to Essential Eight ML2 and progressed towards DISP and ISO 27001, then won a defence grade client.
- Client stories
All client stories
Sixteen stories with the numbers.
IT compliance questions
What owners and IT managers ask when a framework lands on their desk. Anything else, call 1300 787 429.
Related services and reading
Should we start with the Essential Eight, SMB1001 or ISO 27001?
Start with whatever the person asking needs. If nobody has asked yet, Essential Eight ML1 is a sensible base because the other frameworks ask for many of the same controls. SMB1001 suits businesses that want a certificate sized for them. ISO 27001 is the biggest commitment and is often driven by enterprise or overseas clients.
Does certification help with cyber insurance?
It helps you answer the proposal form accurately and show evidence for each answer. Whether it changes your premium or cover is a decision for your insurer and broker.
How does SMB1001 certification work?
SMB1001 has five levels from Bronze to Diamond. You start at the level that fits your business rather than working through all five. We prepare the controls and evidence, and an independent certifying body issues the certificate after its own review. SecureShield Control aligns to the Gold tier and Command to the Diamond tier.
How long does ISO 27001 readiness take?
It depends on your size and how much is already documented. After the gap review we give you a realistic timeline for controls, policies and the evidence an auditor will sample. We have been through certification ourselves, so the plan reflects what auditors ask for.
What does compliance support cost?
SecureShield Core is $25 per person per month ex GST. Control is $60 and maintains Essential Eight ML1, and Command is $100 and maintains ML2. Project work such as policy writing or ISO readiness gets a fixed quote.
We already have an IT person. What would Austin do?
Your IT person keeps running daily IT. We add the security controls, the evidence and the regular reviews. Who owns what is agreed in writing, so nothing is missed at audit time.
Know what applies
before the next questionnaire.
Tell us which frameworks your clients, insurer or tenders ask for. A technical consultant will scope what you have and what is missing, then send a fixed quote.
- A reply within two business hoursA technical consultant reads every enquiry and comes back to you.
- Proven in 90No onboarding fee, 14 days to fix anything you raise and nothing owing if you leave in the first 90 days. How it works
Or call 1300 787 429 or email sales@austintechnology.com.au