BCyber

The cyber jobs we complete for you

Most businesses don't know what they need. That's fine. Start with a health check and we tell you which jobs matter, then we do them.

Our seven jobs

  1. 1

    Cyber health check and plan

    You need this when…
    You know cyber matters but aren't sure where you stand or what to do first.
    You get…
    A board-ready cyber report and a list of recommended jobs.
    Cadence
    One-off, then annual

    Fixed price, quoted after your health check

    Start with a Cyber Health Check
  2. 2

    Backups you can trust

    You need this when…
    You have backups but have never actually restored from one to prove it works.
    You get…
    Tested restore evidence; 3-2-1-1-0 with an immutable or offline copy.
    Cadence
    Setup, then a quarterly restore test

    Fixed price, quoted after your health check

    Start with a Cyber Health Check
  3. 3

    ASIC s912A cyber evidence pack (includes supplier checks)

    You need this when…
    Your board or ASIC could ask you to show your cyber controls, and you'd struggle to produce the proof.
    You get…
    An evidence pack ready for your board and ASIC.
    Cadence
    Annual, refreshed quarterly

    Fixed price, quoted after your health check

    Start with a Cyber Health Check
  4. 4

    Ready for a bad day

    You need this when…
    If you were hacked tomorrow, nobody is sure who would do what.
    You get…
    A tested incident response plan.
    Cadence
    An annual plan and exercise, plus help on the day

    Fixed price, quoted after your health check

    Start with a Cyber Health Check
  5. 5

    ASD Essentials readiness (includes configuration checks)

    You need this when…
    You've been asked about the Essential Eight and don't know how well your settings really work.
    You get…
    Effectiveness ratings, and fixes verified with your IT provider.
    Cadence
    One-off, then annual

    Fixed price, quoted after your health check

    Start with a Cyber Health Check
  6. 6

    Tested by an attacker, fixed and re-tested

    You need this when…
    You want to know how a real attacker would get in, and to see the holes actually closed.
    You get…
    A pentest report, fixes done, re-test verified.
    Cadence
    Annual

    Fixed price, quoted after your health check

    Start with a Cyber Health Check
  7. 7

    Ongoing cyber care

    You need this when…
    You want the routine cyber tasks done every month without having to remember them.
    You get…
    Monthly tasks done and a short report.
    Cadence
    Monthly

    A$10 per task, capped at A$200 a month

    Start with a Cyber Health Check

Straight answers to common cyber questions

Plain-English answers, reviewed by our team. General information only, not legal or insurance advice.

What does s912A require of a small AFSL holder on cyber?

Section 912A of the Corporations Act requires every AFSL holder, however small, to have adequate resources and risk management systems, and ASIC treats cyber security as part of that duty. In ASIC v FIIG Securities (13 February 2026), the Court ordered FIIG to pay A$2.5 million over cyber security failures. A small licensee should be able to show documented controls, named owners and evidence they are working.

Source: ASIC media release 26-021MR

Human-reviewed, Oct 2026

Start with a Cyber Health Check

Does ASD Essentials replace the Essential Eight for my business?

On 15 October 2026, ASD announced ASD Essentials as the next step beyond the Essential Eight. It doesn't switch off the Essential Eight overnight: ASD has not set a fixed changeover date, and both frameworks remain published during the transition. Plan for a move over the next year or two, keep meeting your current obligations, and map the controls you already have so the change is an update, not a restart.

Human-reviewed, Oct 2026

Start with a Cyber Health Check

How do I know my backups will actually work?

Use the 3-2-1-1-0 rule: three copies of your data, on two different types of storage, one kept off-site, one immutable or offline so ransomware can't reach it, and zero errors when you check. The last part matters most. A backup is only proven when you have restored from it and timed how long it took. Test a real restore on a regular schedule, and after any major system change.

Human-reviewed, Oct 2026

Start with a Cyber Health Check

What will my cyber insurer ask for?

Insurers' questions vary, but they commonly ask about three things: multi-factor authentication on email, remote access and admin accounts; backups kept separate from your network and tested; and a written incident response plan staff know how to use. Expect to be asked for evidence, not just a yes. This is general information only, not insurance advice; check your own policy wording.

Human-reviewed, Oct 2026

Start with a Cyber Health Check

Are we ready for ransomware?

You're ready when two things have been tested, not just written down. First, an incident response plan that names who decides, who calls your insurer and IT provider, and how you tell clients, rehearsed in a tabletop exercise. Second, a restore from an offline or immutable backup that you have actually run and timed. If either has never been tested, you don't yet know how long you would be offline.

Human-reviewed, Oct 2026

Start with a Cyber Health Check

Works with your IT provider

Your IT provider runs your systems. We diagnose, check and evidence. They fix; we verify.

How it works

  1. 1

    Tell us once

    A short fact-find about your business.

  2. 2

    We recommend jobs

    Only the jobs that matter for you.

  3. 3

    We do them

    Alongside your IT provider.

  4. 4

    You get evidence and sign-off

    Proof your board and regulators can rely on.

Start with a Cyber Health Check