The engagements that sit above the day to day.
Some work does not belong in a support plan: an Essential Eight uplift, AML/CTF readiness before AUSTRAC comes calling, or an honest review of a Microsoft 365 tenant that grew without a plan. We run these as dedicated consulting engagements, scoped up front with an outcome you can hold us to.
You get a consultant who does the assessing, the fixing and the documenting, and you keep the evidence at the end.
- Under 10 minute average first response
- 90% solved on the first call
- Named technician who knows your environment
- Fixed-price scope after discovery
Everything that comes with it consulting.
Essential Eight maturity assessment and uplift
We map your environment against the ASD Essential Eight maturity model, score where you sit on each of the eight controls, and hand you a costed plan to climb the levels. Then, if you want, we do the climbing with you. No vague traffic-light scoring, real steps with real numbers.
AML/CTF readiness, the IT side
New AML/CTF obligations are reaching real estate and legal practices. We stand up the technology those obligations rest on: AML training modules in Microsoft 365, a training register with automated reminders, secure document management configuration and access controls that stand up to a review. Your compliance adviser handles the law, we make the systems do what the law expects.
Security posture and access control review
A point-in-time, evidence-backed review of who can reach what: admin rights, MFA coverage, conditional access, dormant accounts and shared credentials. You get a written finding and a prioritised fix list, whether or not we do the fixing.
Microsoft 365 tenant review
Tenants grow messy: mergers, old providers, quick fixes that stayed. We review configuration, licensing and security settings against current good practice and hand you a plain-English report on what to keep, fix and stop paying for.
Security awareness programs
Scenario-led staff training and phishing simulations set up as a program, not a one-off video. A register tracks who has done what, with reminders that chase stragglers so the evidence is there when an insurer or auditor asks.
Technology roadmaps and second opinions
An independent look at a migration, an office move, a big quote you are not sure about, or the next three years of IT spend. We put the options and the numbers on one page so you can decide with your eyes open.
Every engagement runs the same way.
- 01
Scope and fix the price
We agree what is being assessed or built, what the deliverable is and what it costs, before any work starts. Consulting creep is how these engagements go bad, so the scope is written down.
- 02
Assess against the framework
Essential Eight, AML/CTF technology obligations or plain good practice, we measure your environment against the standard that applies and collect the evidence as we go.
- 03
Report in plain English
You get a written report a director can read: where you stand, what matters most, what it costs to fix and what can safely wait. The jargon stays on our side of the desk.
- 04
Implement, if you want us to
The report is yours either way. If you want the fixes done, we quote the implementation as its own piece of work and carry it out, then re-test so you can see the score move.
The outcome, not just the activity.
- A scored Essential Eight maturity position and a costed path to lift it.
- AML/CTF technology controls in place before the obligation lands, with the register to prove it.
- A written access control finding your insurer, auditor or board can read.
- A Microsoft 365 tenant you understand, secured and no longer overpaying.
- Staff training with evidence, not a tick-box video from three years ago.
- Big IT decisions made with independent numbers instead of a vendor's pitch.
Eight controls, one maturity ladder
The kit behind the service.
Bring us the question. We bring the evidence.
Whether it is Essential Eight, AML/CTF readiness or a tenant nobody trusts, tell us what is keeping you up and we will scope the engagement with a fixed price.
No, and that is deliberate. Essential Eight is a specific ASD framework with real work behind each maturity level, so we run it as a dedicated consulting engagement rather than pretending it comes free in a support plan. Our managed clients still get security-led fundamentals every day; the uplift is the formal, scored version.
From the technology side: staff who are trained and a register that proves it, documents managed and retained securely, and access to client data controlled and reviewable. We configure all of that in Microsoft 365. For the legal obligations themselves, you keep your compliance adviser; we make sure the systems back up what they file.
No. Consulting engagements stand on their own. Plenty of businesses bring us in for a single assessment or an uplift while keeping their existing IT arrangement. Some later move their support to us, but the report is not a sales funnel.
The assessment itself is quick, typically a couple of weeks including evidence gathering. The uplift depends on where you start and the maturity level you are targeting, which is exactly what the costed plan lays out, control by control, so you can stage it across quarters if that suits the budget.
A written report in plain English: your current position, scored where a framework applies, a prioritised list of fixes with costs, and the evidence behind each finding. It is written so you can hand it to a board, an insurer or an auditor without a translator.
Yes, and most clients ask us to. Implementation is quoted as its own piece of work after the report, so you can see exactly what each fix costs and decide the order. When it is done, we re-test and show you the movement.
A real review by a real consultant.
No charge, no pitch.
One of our consultants goes over your current Microsoft 365 setup, then walks you through exactly what we found. You keep the report whether or not we end up working together.