Managed IT and cyber security for Australian broking houses. Hosted in Australia. Sensitive data stays onshore.
A broking house holds sensitive personal and financial information for every client, and moves money on their instructions. Carriers and regulators now expect you to show how that is protected, not just say it is.
Illustrative layout · read from your own systems by Evisent Live
The answer to "show us your cyber controls" becomes an attachment, not an afternoon.
A spoofed or compromised email changes where a premium is paid or a claim settles. The call-back that would have stopped it never happened.
Medical details, ID and financial records sit in shared mailboxes and file shares with nobody sure who can see them.
One phished login can reach carrier portals, client records and your full correspondence history.
Questionnaires about MFA, backups and incident response arrive at renewal, and need answers with evidence behind them.
Named instruments that already shape what carriers, licensees and regulators expect of a broking house’s systems.
Cyber is a licence obligation. A licensee admitted its cyber controls across its practices fell short, after incidents that included email compromise and client funds sent to fraudsters. Brokers holding or operating under an AFS licence carry the same expectation.
APRA CPS 230 applies to insurers. It has applied since 1 July 2025, and to existing contracts from 1 July 2026 at the latest. Insurers must treat insurance brokerage as a material service if they rely on the broker for a critical operation or the broker creates material operational risk, which means formal agreements and monitoring. Expect more questions, and more requests for evidence.
Privacy Act transparency. Privacy policies must describe decisions that software makes, or substantially helps make, using personal information, including in claims and cover recommendations.
PI and cyber questionnaires. Insurers ask about MFA, backups, patching and email security. A monthly Live Evidence Pack turns that into an attachment.
Start small with an audit, or hand us the lot. Either way you know the price before we start.
Helpdesk, Microsoft 365 and security, run properly.
Published products, each priced on its own.
Low-commitment first steps.
All prices ex GST. Anything outside the standard stack is quoted upfront, before work starts.
Data that needs to stay in Australia stays here, in your Microsoft 365 tenant or our Australian Azure. Where a project genuinely benefits from a more capable overseas model, we use it only for data that is allowed to leave, with your sign-off.
Automations that handle client PII, ID, TFNs or financial data run on Australian-hosted solutions only. Rules and Microsoft-native tools first.
You know the cost before we start. Anything outside the standard stack is quoted upfront.
Built and managed by a cyber security MSP looking after Australian businesses since 2017, not a generic IT shop.
We supply the evidence and help you answer them accurately. For managed clients, the monthly Live Evidence Pack covers most of what carriers ask about MFA, patching and endpoint protection, and Insurer & licensee submissions completes the questionnaire from it.
Usually not. General insurance broking is not a designated service under the AML/CTF Act, and we confirm it against the services you actually provide in the practice review. Brokers typically start with the Settlement & Payment Guard, the Complaints & Breach Register and the exposure sweep. Managed clients can also have their carriers’ questionnaires completed through Insurer & licensee submissions.
In your own Microsoft 365 tenant or our Australian Azure. Automations that handle sensitive data run on Australian-hosted solutions only.
The products cover the jobs most practices share. Your business has its own. Tell us the job that eats your team’s week and we’ll scope a custom automation inside your Microsoft 365, quoted at a fixed price before we start.
Thirty minutes to map your systems and find the gaps that matter. If nothing needs doing, we will tell you that.