Cyber Security

The security your clients, insurers and big customers now ask you to prove.

The number worth knowing

The Australian Signals Directorate puts the average cost of a cybercrime report to a small business at $49,600. Across businesses of every size it is $80,850, up 50 percent in a single year. Those are self reported losses from the 84,700 reports the ACSC received in 2024 and 2025, which works out at one every six minutes.

Your own number matters more than the average. Our downtime cost calculator works out what an hour offline actually costs your business, using your own staff numbers and rates.

Set that against what the controls cost and the sum tends to answer itself. Most of what we turn on already sits inside the Microsoft licensing you pay for every month. We use that first, rather than stacking third party tools on top of it.

IT With You takes a secure by default approach. Every client gets the same baseline of enterprise grade controls across identity, devices, data and applications, which also makes frameworks like the Essential Eight and Zero Trust far simpler to meet.

Why people stop putting this off

The first reason is being asked to prove it. More and more, a client, an insurer or a big customer wants to know what security you have before they will sign or renew. That question usually arrives with a deadline, and it is far easier to answer when you can point at something recognised like the Essential Eight.

The second is that something nearly went wrong. Most of what hits a small business is not dramatic. Someone almost paid a fake invoice. A password turned up in a breach. A laptop went missing. Stopping that sort of thing does not take anything clever. It takes the right settings turned on and someone keeping an eye on them.

Where protection starts

Microsoft Defender Deployment

The full Defender suite set up properly across endpoints, email, identity and servers, so threats are caught rather than missed.

Learn more

Microsoft 365 Security Management

Closing the gaps a default Microsoft 365 setup leaves open, using the licensing you already pay for.

Learn more

Essential Eight Assessments

Where you sit against the ASD baseline today, what maturity level you need, and a plain path to reach it.

Learn more

Zero Trust Assessments

Moving past trusting anything on your network, so every user, device and request is verified before it is allowed.

Learn more

Identity and Access Management

Phishing resistant MFA, conditional access and least privilege, so a stolen password is not enough to get in.

Learn more

Cloud Data Backup

Managed backups with restores that are actually tested, so you know your data comes back after an attack.

Learn more

From First Look to Fully Protected

Four steps, from working out where you actually stand to keeping you protected as the business changes.

Review

Step 1

We look at identity, devices, email, backups and the controls you have today, and measure them against the Essential Eight and industry best practices so you can see where you stand.

Prioritise

Step 2

We rank the gaps by real risk and start with the ones most likely to be used against you, so the work that protects you most happens first.

Protect

Step 3

Phishing resistant MFA, patching, tested backups and email protection, rolled out around your team so nobody loses a day to it.

Maintain

Step 4

Security drifts when nobody is watching, so IT With You keeps monitoring, reviewing and adjusting the controls as your business changes.

Frequently Asked Questions

We are a small business. Are we really a target?

Yes. Most attacks are automated and do not care how big you are. Smaller businesses are often targeted precisely because their defences are lighter. The good news is that a handful of sensible controls can help prevent the vast majority of it.

Isn't Microsoft 365 already secure out of the box?

It has strong security built in, but very little of it is switched on by default. The protection is there in the licences you already pay for. It needs to be configured correctly to actually work, and that gap is where most breaches happen.

What is the Essential Eight, and do we need it?

The Essential Eight is a set of eight practical controls recommended by the Australian Signals Directorate. It is the most widely recognised security baseline in Australia, and increasingly something clients and insurers expect. An assessment shows where you stand and what to fix first.

If we get breached, how quickly can we recover?

That depends entirely on your backups and your plan. With tested backups and a clear response, most incidents are contained and recovered in hours rather than days. Without them, a single attack can close a business for weeks. That is why recovery is part of security, not separate from it.

Our Location
Sydney, NSW, Australia
Our Phone Number
1300 119 246
Connect With Us
Follow us on Linkedin
Business Hours
Monday to Friday: 8 AM to 5 PM

Contact IT With You for a no obligation chat

Contact IT With You for a no obligation chat

Been asked to prove your security yet?

It usually turns up as a questionnaire from a client, an insurer or a tender, with a deadline attached. Book a 30 minute discovery call and we will tell you honestly where you would stand today and what it would take to answer properly.

Book a 30 Minute Discovery Call