Tim Clarkson Cyber security for NZ law firms and accounting practices is no longer an internal IT question. Corporate clients ask for evidence before they appoint you, insurers ask before they cover you, and regulators expect personal information to be protected and breaches to be reported. And practices hold exactly the data criminals want most: client files, […]
Penetration testing in NZ splits into two distinct exercises, internal and external, and they answer different questions about your security. This guide explains the difference, which one a New Zealand SMB should run first, what testing costs, how often to test, and how the results support cyber insurance applications and SMB1001 certification. It is written […]
Most New Zealand businesses now use AI in some form, yet far fewer have written down the rules for using it. This guide explains why an AI policy matters for a NZ business, what a good policy contains, and where ISO 42001, the international standard for AI management, fits for smaller organisations. It is written […]
A virtual CIO gives a New Zealand business senior technology leadership without the cost of a full time executive. This guide explains what a virtual CIO in NZ actually does, the core vCIO responsibilities, how the role differs from an IT manager or an MSP, what the engagement costs, and the signs that tell you […]
Managed IT in NZ priced by team size, not per user. OxygenIT bands start at $750 a month for up to ten. See how to compare MSP quotes fairly.
Cyber insurance requirements in NZ have tightened sharply. A proposal form that once asked whether you ran antivirus and a firewall now demands proof of multi-factor authentication, endpoint detection and response, tested backups and a written incident response plan, and underwriters verify those answers when a claim arrives. This guide sets out the cyber insurance […]
Cyber security framework comparison questions land on the desk of almost every NZ owner and GM eventually, usually triggered by an insurance renewal, a tender or a customer questionnaire. The three names that keep coming up are the Essential Eight, SMB1001 and ISO 27001. They solve different problems, cost wildly different amounts and are asked […]
Microsoft Copilot readiness is the question NZ businesses keep skipping. Copilot answers staff questions using everything their accounts can access across SharePoint, OneDrive, Teams and email, which means it is only as safe as the permissions underneath it. Switch it on before checking those permissions and the salary spreadsheet nobody was meant to find becomes […]
SMB1001 Gold certification is fast becoming the cyber security benchmark New Zealand SMBs are asked to meet in insurance applications, supply chain questionnaires and tender responses. This guide explains what SMB1001 Gold certification in NZ involves, what it costs, which controls you need, who signs it off and how long it takes. It is written […]
Key Takeaways MFA blocks the vast majority of automated credential attacks on its own. Start with an audit of your assets, users, and highest-risk access points before rolling anything out. Authenticator apps and hardware keys are stronger than SMS codes. Use SMS as a fallback, not the default. Conditional access policies mean staff on trusted […]
We support New Zealand businesses of 20 to 200 staff, from Christchurch, with response targets we publish.
ISO 27001 and ISO 42001 certified, independently audited annually.
Sales 0800 242 206
Support 0800 101 095
[email protected]
Christchurch and Wellington.
Engineer in Auckland.
