# Small business cyber security

[Read the public page](https://www.adarkcloud.com.au/services/cyber-security)

Perth based security help for small businesses across Australia. Review accounts, devices and recovery, then agree on practical improvements.

Small business cyber security covers the accounts, devices and information your business relies on. A Dark Cloud Creative helps you establish the gaps, choose appropriate changes and document who will maintain them, with Perth based support and remote work across Australia.

Perth based, with remote support across Australia. From $79 an hour ex GST, with the fee agreed before work begins. Call Josh C on 0408 530 303.

## What we can help with

- Account and access review
- Device and software protection checks
- Prioritised security action register
- Recovery and incident preparation
- Agreed implementation and handover

An old administrator account, a laptop that has stopped updating or a backup nobody has tested can create a specific job. You can start with that concern rather than commission a review of everything.

If a customer or insurer needs evidence, bring the actual requirement. The work and its acceptance checks should answer that requirement.

## Start with the systems that matter

We establish the business email, financial apps, domain access and records you need to operate. The review records the people and providers responsible for them. A system outside the agreed scope stays outside the conclusions.

Tell us whether you need a general improvement, help with a known weakness or evidence for a particular requirement.

## Check settings against ordinary work

A security setting should be checked against how people use the system. We can review administrator separation, multi factor authentication and account recovery without assuming that a dashboard score proves the environment is safe.

Shared accounts and departing staff need particular attention because the business must retain access while removing the right person.

## Give each finding a next step

The action register should explain the weakness, its affected systems and the proposed response. Updates, configuration changes and replacing unsupported equipment are different jobs.

We agree on implementation priorities and fees before work begins. When a change depends on another provider, that dependency needs an owner rather than a vague recommendation in a report.

## Choose a focused service when the issue is known

Vulnerability management identifies and tracks weaknesses. Remediation deals with agreed findings, while patch management maintains supported software updates. Managed security gives recurring tasks defined responsibility.

Policies, backups, Essential Eight support and SMB1001 preparation have their own scopes. We can discuss which combination fits your business without treating every enquiry as a full programme.

## Prepare for an incident before one happens

A useful incident plan names the people who can make decisions and reach the relevant providers. Recovery instructions need to be available when ordinary email or file access is unavailable.

An active compromise requires incident handling. Banks, insurers or a specialist responder may need to be involved, and their requirements can affect what should be changed.

## Keep the business in control

Your business retains ownership of accounts and the decisions about accepted risk. We document completed checks, remaining work and provider responsibilities so another person can follow the handover.

Account and device work can often be delivered remotely across Australia. Physical work in Perth, or arrangements elsewhere, are discussed separately against the actual requirement.

## Common questions

### Can a sole trader start with one concern?

Yes. Describe the affected account, device or requirement and we can discuss a focused scope. A wider review can be considered after that issue is understood.

### Does a review guarantee protection?

No. A review reports on the agreed systems and evidence. Security work reduces particular risks, but it cannot establish that every threat has been removed.

### Can you work with our existing IT provider?

Yes, when access and responsibilities are agreed. The scope should identify who makes changes, who maintains them and who approves decisions for the business.

### Do we need to be in Perth?

Remote work is available across Australia where the systems and access suit it. Tell us about any physical device or site requirement during scoping.

## Useful next steps

- [Vulnerability management](https://www.adarkcloud.com.au/services/vulnerability-management)
- [Security remediation](https://www.adarkcloud.com.au/services/security-remediation)
- [Managed security](https://www.adarkcloud.com.au/services/managed-security)
- [IT policies](https://www.adarkcloud.com.au/services/it-policies)
- [SMB1001 preparation](https://www.adarkcloud.com.au/services/smb1001-support)
- [Backups and recovery](https://www.adarkcloud.com.au/services/backups-and-security)
- [ASD small business cyber security handbook](https://www.cyber.gov.au/publication/small-business-cyber-security-handbook)
- [The Essential Eight for small business owners](https://www.adarkcloud.com.au/blog/the-essential-eight-what-perth-business-owners-need-to-know)
- [Small business IT health check](https://www.adarkcloud.com.au/tools/it-health-check)
- [ASD Essentials for small business](https://www.adarkcloud.com.au/blog/asd-essentials-small-business)
- [Use the practical security guide](https://www.adarkcloud.com.au/guides/asd-essentials-small-business-guide)

Reviewed 2026-10-15

- [Ask for IT help](https://www.adarkcloud.com.au/contact)
- [Check your IT basics](https://www.adarkcloud.com.au/tools/it-health-check)

