Contact
Talk to us about your cyber security.
Book a call, phone us from the footer, or send a note about your organisation, your sector and the system you need to protect. The form below does not store what you enter.
Before you write
Questions we are often asked.
Who do you work with?
Small and medium businesses, federal agencies and local government across Australia. We also work with suppliers to government when the engagement is similar.
Where is it delivered?
Onshore, in Australian business hours, and only against systems named in an agreed scope.
Will testing disrupt the service?
Security and load tests are scheduled and bounded. Abort conditions are agreed before anything runs. We coordinate with the team that monitors the alerts.
Do you replace our team or our provider?
No. We test, review, and advise. Staff or the managed service provider usually perform the remediation. We remain available to explain the findings and to retest when that is in scope.
Are the frameworks on this site certifications?
No. Essential Eight, ISM, PSPF, SOCI, the Privacy Act, CPS 234, and the others are standards we align work to. They are not certifications held by Southern Shield. If an engagement is to produce evidence for an assessor, that purpose is stated in the statement of work.
Are the platforms listed partners of the firm?
No. Amazon Web Services, Microsoft Azure, Microsoft 365, GitHub, GitLab, and the others are platforms we are commonly asked to assess. The list is not a vendor partnership, a competency badge, or a certification held by Southern Shield.
What about sensitive government information?
Handling, citizenship, and clearance requirements are settled during scoping, before any access is granted. If we are not suitable for the classification, we say so before the engagement starts.
How does an engagement start?
Book a call, or phone us. We reply with questions or a proposed scope.