What we'd want to know if we were running your business

Five security gaps that keep showing up in NZ businesses

The same five security gaps keep showing up in NZ businesses. None of them are technology problems.

Your MSP Isn't Your Security Team

MSPs handle infrastructure. Security ownership covers risk, policy, reporting, and incident command. Here is where the line sits and how both roles work together.

5 things your cyber insurer will ask you

Cyber insurance applications are getting harder. Here are the five questions every NZ insurer asks and how to prepare.

Three controls that get cyber insurance declined

MFA, backup testing, and incident response plans — the three controls NZ insurers check first. Here is what they expect and where businesses fail.

IPP 3A starts May 2026. You need a process

IPP 3A changes the rules for referrals, background checks, partner handoffs, and any other indirect collection. What NZ businesses need to fix before 1 May 2026.

If the Privacy Commissioner contacts you

A practical guide to how the Office of the Privacy Commissioner investigates, what evidence they ask for, and what NZ businesses should have ready before a complaint lands.

You don't need a full-time CISO. You need a real owner

A full-time CISO costs $180K–$280K+. For a 10-to-500-person NZ business, that's the wrong question. Here's what it costs to put a real security owner in the seat without hiring an executive.

The Cybersecurity Missing Middle for NZ Businesses

Full-time CISOs cost $200K+. MSPs do not cover ownership, reporting, or evidence. Big consultancies are too slow. Here is the missing middle most NZ businesses have not considered.