Insights
Practical reading for business leaders
Useful notes on security, compliance and Microsoft 365, written for non-technical buyers first.
The Privacy Act Now Covers Your Client ID Data, Even Under $3M Turnover
Plenty of small firms in Brisbane, bookkeepers, small accounting practices, sole conveyancers, have never had to think about the Privacy Act. The $3 million turnover small business exemption has covered them for as long as they've been trading. That exemption just got narrower, and it happened alongside the AML/CTF changes covered in our previous post, not through a separate privacy reform.
Conditional Access and MFA: Locking Down Practice Logins
Conditional Access is a Microsoft Entra feature that evaluates the circumstances of a sign-in, not just the credentials, before deciding whether to let it through.
ComplianceNotifiable Data Breaches: What Happens If Patient Data Is Exposed
What the Notifiable Data Breaches scheme actually requires when a health practice suffers a data breach, and how the 30-day assessment clock works.
Microsoft 365Does Microsoft 365 Back Up Your Data? Not by Default
"It's in the cloud, so it's backed up" is one of the most common and most costly assumptions in small business IT. Microsoft's own documentation says otherwise.
Cyber SecurityWhy Health Practices Are Australia's Top Breach Target
Health service providers reported more data breaches to the OAIC in 2025 than any other industry in Australia, again. Here's why small practices are being targeted and what actually reduces the risk.
Cyber SecurityEssential Eight Explained: A Guide for Small Practices
The Essential Eight gets mentioned constantly in cyber security advice, rarely explained properly. Here's what the framework actually contains, how the maturity levels work, and what a small practice should realistically aim for.
Microsoft 365Fix Practice Emails Landing in Spam: SPF, DKIM, DMARC
If appointment reminders or invoices from your practice keep landing in spam, the fix usually isn't your email content. It's three DNS records most Microsoft 365 tenants never get around to setting up.
Practice TechnologyWhat Is Endpoint Management and Why Practices Need It
Reception PCs, practitioner laptops, personal phones checking practice email. Most practices have no central way to manage any of it. Here's what endpoint management actually does about that.
ComplianceThe Privacy Act Applies to Health Practices of Any Size
"My practice is too small for the Privacy Act to apply" is one of the most common compliance myths in allied health. Here's why it's wrong, and what the law actually requires.
Guides & ChecklistsCyber Security Checklist for Allied Health
A working checklist covering the accounts, devices, backups, and habits that actually reduce cyber risk for a small allied health practice, without needing a security background to use it.
Cyber SecurityRansomware and BEC: The Costliest Threats to Practices
Ransomware incidents against the health sector doubled in the last financial year, and attackers succeeded almost every time they tried. Here's what the latest ACSC data shows and what actually helps.
Practice TechnologyWhy Patient Wi-Fi Shouldn't Share Your Practice Network
A lot of practices offer patients Wi-Fi in the waiting room without realising their practice management system might be sitting on the exact same network. Here's why that matters.
See where your business stands
Prefer a structured review to more reading? Request a Cyber Health Check.