From the Founder
AI agents can plan, use tools and take actions across business systems. Understand the security boundaries, privileges and controls that matter before deployment.
Read the article →They solve different problems. Learn which one your Australian business needs first, and when running both gives you a stronger picture of real risk.
Read the article →What to ask, what to scope and what a good report should include before you engage a penetration testing provider in Australia.
Read the article →Comparing cyber security frameworks for your Australian business. Which one suits your size, customers and risk profile, and how SMB1001, the Essential Eight and ISO 27001 fit together.
Read the article →ASD's Essentials consultation has closed, but the proposed framework has not been finalised. We explain what has formally changed, what remains proposed and what organisations should do now.
Read the article →Why BEC still works, what controls reduce exposure, and where small teams should start.
How to prepare for the first hours of a ransomware, account compromise, or data breach event.
How security leaders can explain cyber risk without burying executives in technical detail.
Australian Essential
Eight Field Guide
A practical guide we're putting together for Australian organisations - drawing on public ACSC guidance, industry incident data, and our own engagement experience. Plain-English, vendor-neutral, and focused on what moves the needle. Register your interest and we'll send it when it's ready.
- The two or three Essential Eight controls most organisations get stuck on
- Business Email Compromise: still the most common initial vector
- What a realistic uplift roadmap looks like (and what it costs)
- The human factor: why people remain the primary target
- Where to start if you're a small team with a big mandate
Get the RTCS Threat Briefing
Monthly intelligence for Australian security leaders. Short, specific, and worth your inbox.