Security and governance, built in
We are an ISO 27001 and ISO 9001 certified IT provider, audited externally by Compass Assurance Services. Every control we recommend to you is one we run on our own business first.
Your price in two minutes, no email needed. Or call 1300 787 429.
★★★★★ 4.9 on Google from 60+ reviews
- ISO27001 and 9001 certified, externally audited
- 24/7Threat monitoring and response on SecureShield plans
- Top 50MSP in Australia, three years running
- 25secAverage wait to reach an engineer
Trusted by 300+ organisations, including
What our certifications mean for you
An independent auditor checks every year that we manage security and quality the way we say we do.
- 01
Easier supplier due diligence
When your clients, insurer or auditor ask how your IT provider manages security, you can point to an audited, certified system. Ask us for copies of our certificates.
- 02
Consistent service
Logging, triage, escalation and change follow documented processes under ISO 9001, so quality does not depend on who picks up the ticket.
- 03
Security that is managed, not assumed
Under ISO 27001, risks are assessed, controls are reviewed and incidents are handled against a documented plan.
The controls we run on our own business
You are trusting us with privileged access to your systems. This is how we protect that access.
Single sign on and MFA
Our core management platforms sit behind Microsoft Entra ID single sign on, with MFA enforced and passkeys on our most sensitive systems.
Microsoft Entra ID
A separate management network
Administrative access to our hosted platforms runs through a VPN and jump host, kept apart from our corporate network.
VPN and jump host
Granular Microsoft 365 access
We manage client Microsoft 365 tenants through Microsoft GDAP, which gives engineers specific delegated roles rather than blanket access.
Microsoft GDAP
Immutable backups
Our hosted platforms back up to object storage with 30 day immutability, so backups cannot be altered or deleted within that window.
30 day immutability
Logging and change control
Critical systems and alerts are logged centrally, and high risk changes follow a documented approval process with peer review where needed.
Peer review for high risk work
Incident response and insurance
A written incident response plan with named roles and an out of band way to coordinate, with cyber liability insurance behind it.
Named roles, out of band contact
Your hosted data stays in Western Australia
AustinCloud, our private cloud, runs in Perth data centres. Hosted workloads and their primary backups stay onshore in WA, under Australian law.
- 01
NEXTDC P1
Colocation for AustinCloud infrastructure.
- 02
NEXTDC P2
Private cloud and our immutable backup repository.
- 03
Vocus
Private cloud compute and storage.
- 04
Microsoft 365
Data for Australian tenants is stored in Microsoft's Australian data centres.
See how the private cloud works on cloud services.
Practical governance for growing organisations
Structure and evidence your leadership team can use. These are the obligations we help clients prepare for most often.
| Obligation | What it asks of you | How we help |
|---|---|---|
| Privacy Act and Notifiable Data Breaches | Assess a suspected breach quickly, and notify the OAIC and affected people when it is eligible | Controls that reduce breach risk, plus the logs and evidence to work out what happened |
| Ransomware payment reporting | Businesses over $3 million turnover must report a ransomware payment to ASD within 72 hours under the Cyber Security Act 2024 | Built into your incident response plan, with the details you need to report |
| Cyber insurance | Accurate answers on MFA, backups, endpoint protection and patching | Answers backed by evidence from your own systems |
| Essential Eight | A maturity level your clients, insurer or a tender asks for | Assessment, uplift and a score you can track |
| DISP | Governance, personnel, physical and cyber security for Defence work | The cyber controls and the evidence behind them |
| SMB1001 | A tiered certification written for small and medium businesses | Controls mapped to your tier through our SecureShield plans |
Swipe the table sideways to see every column.
We handle the technical controls and evidence. For legal interpretation we work alongside your legal advisers.
We also set up the basics: clear roles between your team and ours, policies staff can read, a risk register and an incident response plan that says who does what. See managed cyber security.
Security you can watch improve
We score your environment against the Essential Eight when we start and show you how it moves as the work is done. This is what the scorecard looks like.
| Mitigation strategy Sample | ML1Baseline | ML2Target | ML3Advanced |
|---|---|---|---|
| Patch applications | |||
| Patch operating systems | |||
| Multi factor authentication | |||
| Restrict administrative privileges | In progress | ||
| Application control | |||
| Restrict Microsoft Office macros | |||
| User application hardening | In progress | ||
| Regular backups |
Swipe the table sideways to see every column.
Sample client for illustration. Your scorecard uses your own environment. See how our Essential Eight service works.
- Energy
InterContinental Energy
Essential Eight Maturity Level One, on our assessment, built on the Microsoft 365 Business Premium licences it already had.
- Engineering
Powertech
Essential Eight Maturity Level Two alignment, and approval to start work with a defence grade client.
- Professional services
Palisades
Intune, conditional access, Defender, BitLocker and governance documents met a prospective client's requirements and won the partnership.
- Client stories
All client stories
Sixteen stories with the numbers.
A top 50 MSP in Australia, three years running
Rated by our clients on Cloudtango, and audited every year on security, quality and cyber controls.
Top 50MSPs in Australia
- 2024
- 2025
- 2026
Ranked on client satisfaction and service depth.
Read our 25 client reviews on Cloudtango
ISO 27001
Information securityHow we handle your data, passwords and access, audited every year.
How we protect your data
ISO 9001
Quality managementDocumented processes, so every engineer works to the same standard.
How we work
SMB1001 Gold
Cyber security, Level 3The 27 control cyber standard we take clients through, held ourselves.
Check our certificateSecurity and compliance questions
What clients, insurers and auditors ask us. Anything else, call 1300 787 429.
Is Austin Technology ISO 27001 certified?
Yes. We are certified to ISO/IEC 27001 for information security management and ISO 9001 for quality management. Both are audited externally by Compass Assurance Services, and we can share copies of our certificates for your supplier register.
Where is our data stored?
Workloads we host in AustinCloud run in Perth datacentres, and so do their primary backups. Microsoft 365 data for Australian tenants sits in Microsoft's Australian datacentres.
How do you protect your own access to our systems?
Our management platforms sit behind single sign on with MFA enforced, administrative access to hosted platforms runs through a separate management network, and we manage Microsoft 365 through GDAP so engineers get specific roles rather than blanket access.
Can you help with our cyber insurance questionnaire?
Yes. We help you answer accurately and back each answer with evidence from your systems, which matters if you ever need to make a claim.
What happens if we have a cyber incident?
We follow a documented incident response plan: contain the threat, restore critical systems, investigate the cause and close the gaps. We support any reporting you need to do, including notifiable data breaches and ransomware payment reports, and review the event with you afterwards.
Do you hold cyber insurance?
Yes. We hold cyber liability insurance as part of how we manage our own risk.
Check our security
before you trust us.
Ask for our certificates. Then tell us about your own security and a technical consultant will scope what you need and send a fixed quote.
- A reply within two business hoursA technical consultant reads every enquiry and comes back to you.
- Proven in 90No onboarding fee, 14 days to fix anything you raise and nothing owing if you leave in the first 90 days. How it works
Or call 1300 787 429 or email sales@austintechnology.com.au