
Cyber Security in Brisbane
Cyber security for Brisbane businesses of 5 to 100 people, looked after month by month by a team that gets to know your setup. We look after the settings and tell you what needs attention.
- 5/5 from 45+ Google reviews
- SMB1001 Gold certified
- Essential Eight Maturity Level 2
- Microsoft Partner

Certified to SMB1001 Gold, an Australian cyber security standard
What Australian businesses report
Every year the Australian Signals Directorate publishes what businesses report to it. In 2024 to 2025 it received about 84,700 cybercrime reports. The average cost that small businesses reported rose 14% on the year before.
The figures above are averages of what businesses said it cost them. Yours will depend on your business. The plans and what they cost are on our Managed IT page, so you can put the two side by side.
Australian Signals Directorate, Annual Cyber Threat Report 2024 to 2025. Costs are self-reported by the businesses that made a report.
So what keeps your own business safe from day to day?
Security settings change over time and need checking
A security setup is correct on the day it is finished. Then people add a new app, change who can sign in, plug in a new device or switch a protection off to fix a problem and forget to switch it back on. The government’s advice changes too and better protections keep appearing. If nobody is checking, the setup slowly drifts away from the advice.
Our security work is part of our Managed IT plans, called Silver, Gold and Platinum, for that reason. We keep the settings where they should be, spot the changes that matter and add the newer protections as they arrive, so nothing depends on someone remembering to look.
Here is what we look after and the plan each part starts with.
Your security is checked and kept up to date month by month
What we look after and where each part starts
Our Managed IT plans are called Silver, Gold and Platinum. They start at $75 per person per month, excluding GST and all three are on our Managed IT page. Each plan includes everything in the plan below it. Licences are billed separately. A plan covers far more than security, from the help desk to Microsoft 365 backup.
| Area | What we do |
|---|---|
| Starts with the Silver plan | |
| Computers and phones | Every company computer is protected and watched around the clock, so a problem is dealt with before it spreads. Each device also has its own software firewall, a gatekeeper that blocks unwanted connections. |
| Email is checked for scams and fake invoices before it reaches you. | |
| Your people | Practice phishing emails so staff learn to spot the real thing. Wider staff training is available as an add-on on any plan. |
| Finding weaknesses | We check your devices and systems for known weaknesses and tell you what to fix first. From our Gold plan, security is one of the things we talk through at your quarterly planning meeting. |
| Microsoft 365 backup | Your email, files, SharePoint, Teams and OneDrive are copied to a safe second location every four hours. |
| Added on the Gold plan | |
| Passwords | A business password manager and an alert if a staff member's details turn up in a data leak. |
| Watching Microsoft 365 | Your Microsoft 365 is watched for stolen or misused accounts. |
| Microsoft 365 sign-in rules | Security rules that control which devices and places can sign in, so a stolen password alone is not enough. This uses the Microsoft 365 Premium licence, billed separately. |
| Your office network | We manage the firewall in your office, the gatekeeper between your network and the internet. |
| Following the Essential Eight | Your setup is built around the Essential Eight, the Australian government's recommended security steps for small business. |
| Cyber insurance forms | Insurers ask what protections you have when you apply or renew. We help you get ready for those questions and where to start depends on your setup. |
| Added on the Platinum plan | |
| Servers | Servers, in your office or in the cloud, are looked after like your computers, with their security settings tightened and kept that way. |
| Admin access | Staff run the programs they need without anyone holding an administrator password they do not need. |
| Server backup and recovery | Server backups that we test regularly and a recovery plan written for your business. Server backup is an add-on, priced on your servers and data. |
| Formal alignment | Formal alignment of your setup to the Essential Eight and to SMB1001, the Australian security standard written for small and medium businesses and support to work towards ISO 27001. |
We also cover the security work we do outside the plans.
Security work outside the plans
One-off projects
You do not have to be on a plan to ask for help.
As a project, we can run:
- a security assessment
- tighter security settings in your Microsoft 365
- the same on your servers
Project work is charged for the time and materials it takes, separately from the plans.
A tightened setup starts to slip the day the project finishes, so we will tell you what it would take to keep it right and you decide.
Penetration testing
A penetration test is where a specialist tries to break into your systems to show where the gaps are.
- We arrange the test with a partner who does this work every day.
- Then we fix what it finds.
It is an extra that we arrange for any client, whichever plan they are on.
If you are not sure which of these you need, there is a place to start.
We check your devices and systems for known weaknesses and tell you what to fix first
Not sure where you stand? Start with a free cyber security audit

Already have an IT provider? We can give you a second opinion on what they have set up or take over from them if you decide to change. Either way the audit is free and we confirm the plan and the price after it.
How the audit works
- LookWe look at your accounts and who can reach what, your sign-in rules, security tools, email and file sharing settings, backups and licences and device protection and how well it is all hardened.
- Tell youYou get a written report of what is in place and what is not, in plain words. It normally takes a few days once we have access to your systems.
- DecideYou decide what happens next.
Is Cyber Security Right for Your Business?
Cyber security from IT Start suits Brisbane businesses of 5 to 100 people in any industry, including these.
Suits you if:
- You have 5 to 100 people.
- You do not have a security team of your own or you have one person who needs backup.
- You want your security looked after month by month, not once.
Not the right fit if:
- You want a report or certificate only, with no ongoing security work behind it.
- You have your own security team and want to keep running it all yourselves.
- You want the most thorough protection at the lowest possible price.
Across Brisbane
North and south and from the Sunshine Coast to the Gold Coast.
Australian help desk
Our help desk is Australian based.
What our clients say5.0★★★★★45+ Google reviews
Common questions about cyber security
Have a different question? Ask us directly.
Book a free cyber security audit
Tell us about your business and what you want looked after. If you already have an IT provider, tell us who and we can give a second opinion or take over. Most messages get a reply the same business day.
(07) 3179 6766
support@itstart.com.au