by Paul Friend, MBA | ISO Lead Auditor | Mar 3, 2026 | Blog
Let’s be direct: a generic template will not save your business when a real crisis hits. An effective business continuity plan (BCP) is a living strategy, built from credible, real-world scenarios—not a fill-in-the-blanks document you file away. This guide cuts...
by Paul Friend, MBA | ISO Lead Auditor | Mar 3, 2026 | Blog, Essential 8
If you are an Australian business looking to work with the Department of Defence, you need to know about the Defence Industry Security Program (DISP). Essentially, it is the mandatory security framework that gets you in the door. It sets the standard for how you...
by Paul Friend, MBA | ISO Lead Auditor | Feb 27, 2026 | Blog, Penetration Testing
In the world of cybersecurity, penetration testing for web applications is essentially a controlled, ethical cyber-attack on your own systems. Fundamentally, it involves hiring a team of ethical hackers to find security holes before real criminals do. Therefore, it’s...
by Paul Friend, MBA | ISO Lead Auditor | Feb 25, 2026 | Blog
The Security of Critical Infrastructure Act 2018 (SOCI Act) is more than just another piece of legislation; it is a fundamental shift in how Australia protects its most vital services. The Act imposes proactive security duties on the owners and operators of these...
by Paul Friend, MBA | ISO Lead Auditor | Feb 25, 2026 | Blog
Let’s get straight to it: what is business continuity planning? Think of it as your organisation’s playbook for staying on your feet. It is the framework that ensures you can continue delivering services and protecting your assets when a major disruption hits....