SteadyPoint

DI(mostly)Y Cyber for Aussie Small Business

Australian businesses · 1 to 20 people

Get secure enough.Then get back to work.

Cyber advice for small business usually arrives as a quote you can't read and a bill you didn't expect. We do it the other way round. Find out where you stand, agree what good enough looks like for a business your size, then take the short list and knock it over yourself.

Find out where I stand Free · 12 minutes · no IT knowledge

01 / How it works

Four steps, in the order they matter.

The same four questions every owner should ask, answered in order.

01

“Where am I now?”

Risk Score

Five risk areas, 5 questions in each, about how the business already runs. Out comes a score, plus a rating on each area so you can see which one is thin.

02

“Where do I need to be?”

Maturity Target

Good enough is a defined level. Yours is set against SMB1001, the cyber standard written for businesses your size, so the finish line is somebody else's number and not our opinion.

03

“What do I actually do?”

Action Plan

The distance between those two becomes a list, worst first. Each job says what it is, why it matters to you, and roughly how long it takes. One thing at a time, never a wall of twenty-seven.

04

“How do I get it done?”

DI(m)Y

You do (m)ost of it, because most of it is a setting you change once. Every job comes with the how-to written for a person, not a technician. The genuinely fiddly bits, we can do, or your IT person can.

The disc starts adrift and ends on the point. That's the whole service.

02 / The point

Security isn't infinite. It just gets sold that way.

A business with eight people doesn't need what a bank needs, and paying for it would be unnecessary. There is a level that makes you a hard target and satisfies the clients, insurers and tenders that ask. That level is your first finish line.

What you don't need

Sold hard. Rarely necessary.

  • A twenty thousand dollar program of works.
  • A consultant on retainer to watch a dashboard nobody reads.
  • To learn what EDR, SIEM or zero trust stand for.
  • To feel stupid in a meeting about your own business.

What you do need

About a dozen things, done properly.

  • A read on what you've already got in place.
  • The handful of gaps that would actually hurt, in order.
  • Instructions a normal person can follow.
  • Proof it's done, for the client or insurer who asks.

03 / The promise — Do it (mostly) yourself

We can be your Do. Or not.

We know what a small business needs to do to be protected. Plenty of you have already done some of it, and that counts. Our job is finding what's left, then handing it over in a form you can act on. After that it's yours to do, or ours to help with. That's the DI(mostly)Y promise.

Option one

You do it

Most jobs on your list are a setting you change once and never think about again. We write them out step by step. No charge, no catch.

Option two

Someone else does it

Already have an IT person? Give them the list. It's written plainly enough that they'll know exactly what you're asking for.

Option three

We do those bits with or for you.

Some things are worth handing over. Tell us which ones you'd rather not touch and we'll quote just that, not a program of works.

04 / Measured against something real

Not our opinion of secure. Australia's.

Your score and your target are mapped to recognised standards, so when a client or an insurer asks where you're up to, you've got an answer with a name on it.

SMB1001

Built for businesses your size

SMB1001 is a tiered cybersecurity standard for small and medium business, from Bronze up. Your checkup shows which tier your current practices line up with, and which controls move you to the next one. Bronze through Gold are self attested, so you can get there under your own steam.

What is SMB1001?
ASD Essential Eight

The government baseline

The Australian Signals Directorate's eight priority strategies. We map your answers across for an indicative read, so you can see where you sit against the yardstick most tenders and insurers already know.

05 / Find out where you stand

We can be some of the D in DI(mostly)Y. Or someone else can.

At SteadyPoint, we know what small businesses need to do to be protected. Many of you have already done some of it, and that’s great. We find out what you haven’t done yet to be secure. Much of this you can DIY. If you get stuck, you can book us in to help. And that’s DI(m)Y.

Drag or tap the words into order to unlock