Free Resources

Practical compliance resources for Australian organisations

Guides, interactive readiness checklists, and insights — built around what auditors actually look for, not what makes compliance seem harder than it is. Everything here is free.

Training: ISMS, AIMS & PIMS Readiness checklists Deep-dive guides Insights & articles

✓

Interactive checklists

Answer questions, see your score, download a prioritised PDF roadmap. Takes 12–15 minutes. Gives you an honest baseline and the most important gaps to close first.

Deep-dive guides

Practitioner-level guides on specific topics — what auditors look for, how to build it, what good looks like. Written for CISOs, compliance owners, and technical leads.

⌘

Insights & articles

Practical articles on compliance strategy, enterprise sales, and implementation — written for teams that need to make compliance decisions, not just read about them.

Interactive readiness checklists

Answer the questions, see your score, and download a prioritised PDF roadmap. Each checklist is mapped to the relevant framework's maturity criteria so the output tells you exactly where you stand — not just whether you pass or fail.

How the checklists work: Answer yes / partial / no for each control area → your score updates in real time → download a branded PDF with domain breakdown, top gaps, and next-step guidance. Free, no sign-up required.

ISO 27001 40 questions · ~15 min

ISO 27001 Readiness Checklist

Score your ISMS across scope, risk management, Annex A controls, SoA, and internal audit. Identify your top gaps and download a prioritised PDF roadmap.

Start checklist →

ISO 27701 35 questions · ~12 min

ISO 27701 Privacy Readiness Checklist

Assess your PIMS maturity across ROPA, DPIA, data rights handling, consent management, and third-party privacy risk. Aligned to the Australian Privacy Act.

Start checklist →

ISO 42001 30 questions · ~12 min

ISO 42001 AI Governance Checklist

Score your AI Management System across model inventory, AI risk assessment, human oversight, monitoring, and responsible AI policy. Aligned to the AU AI Safety Standard.

Start checklist →

Essential Eight 45 questions · ~15 min

Essential Eight Readiness Checklist

Assess your maturity across all eight ASD controls — application control, patching, macros, MFA, admin privileges, backups, and more. Scored to ML1/ML2/ML3 criteria.

Start checklist →

Deep-dive guides

Practitioner-level guides on specific compliance topics. Each one covers the standard, what auditors actually check, how to implement it, and what good evidence looks like.

Featured Essential Eight · ASD 20 min read

The Essential Eight Explained — Australia's Complete Cyber Security Guide

What the Essential Eight is, the maturity model (ML1/ML2/ML3), all eight controls in detail, who needs it, how to achieve ML2, and what evidence auditors expect. Updated June 2026.

Read guide →

IS18 · Queensland Government 18 min read

IS18 Compliance for Queensland Government ICT Suppliers — Complete Guide

What IS18 requires, how it maps to Essential Eight and ISO 27001, what an IS18 Compliance Statement must contain, and how to achieve compliance in 4–12 weeks. Essential reading for any QLD Government ICT supplier.

Read guide →

Essential Eight · ASD · Transition 10 min read

ASD Essentials Series: What Replaces the Essential Eight?

ASD is retiring the Essential Eight and replacing it with the Essentials series — a broader framework covering enterprise IT, OT, cloud and agentic AI. Understand what's changing, when, and what to do now.

Read guide →

RFFR · ISM · DEWR Reference

The RFFR SoA Control Library — Every ISM Control, and What Automates

Browse the complete Right Fit For Risk Statement of Applicability: all 989 ISM (June 2026) controls plus the 7 program-deed obligations, filterable by guideline, with Essential Eight maturity and Microsoft 365 automation coverage marked on every control.

Read guide →

ISO 27001 · ISO 27701 · ISO 42001 12 min read

Inside a Statement of Applicability (SoA)

What auditors expect, how risk links to Annex A, and how to build an integrated SoA across ISO 27001, ISO 27701, and ISO 42001 in Microsoft 365.

Read guide →

ISO 27701 · Privacy Act 10 min read

What a Good ROPA Looks Like — and Common Mistakes

The anatomy of a useful Record of Processing Activities with worked examples, common gaps that trigger regulatory enquiries, and a SharePoint-based implementation guide.

Read guide →

ISO 42001 · AI Governance 10 min read

AI Governance Readiness — ISO 42001 Explained

Model inventory, AI risk and impact assessments, human oversight, and monitoring — a practical guide to building an AI Management System inside Microsoft 365.

Read guide →

Microsoft 365 · Azure · AWS 8 min read

Automating Compliance in Microsoft 365, Azure & AWS

How to turn evidence collection, access reviews, and security posture into continuous assurance using tools you already own — no third-party GRC platform required.

Read guide →

ISO 27001 · ISO 27701 · ISO 42001 14 min read

How to Build a Risk Register in SharePoint

Full column schema, conditional formatting JSON, Power Automate flows, and views — one SharePoint List covering ISO 27001, ISO 27701, and ISO 42001. No third-party GRC platform required.

Read guide →

Insights & articles

Practical articles on compliance strategy, enterprise sales, and implementation guidance for Australian organisations.

View all articles →

ISO 27001 · Cost

What ISO 27001 Actually Costs in Australia (2026)

A practitioner breakdown of certification costs for Australian mid-market organisations — the five real cost components, the GRC platform question, and the line items most cost guides leave out.

Read article → Enterprise Sales

3 Compliance Fears Killing Your Enterprise Deals

Why enterprise procurement has changed, what buyers are actually looking for, and how to turn compliance into a competitive advantage.

Read article → ISO 27001

13 Things Most People Don't Know About ISO 27001

ISO 27001 is one of the most misunderstood security standards. Here are 13 surprising truths about the ISMS with practical business examples.

Read article → AI Governance

ISO 42001 AI Governance: A Simple, Business-Ready Playbook

A practical guide to implementing ISO 42001 using the tools you already have — Microsoft 365, SharePoint, and simple workflows.

Read article →

Real outcomes from Australian organisations

See how organisations like yours achieved certification, improved maturity, and unlocked enterprise contracts — with specific timelines and outcomes.

View all case studies →

FinTech 12 weeks

ISO 27001 Certification in 12 Weeks

Seed-to-Series-A FinTech from fragmented policies to certified ISMS — with reusable sales assurance that closed two enterprise deals immediately after certification.

Read case study →

Healthcare 10 weeks

Zero Maturity to Essential Eight ML2 + ISO 27701 + ISO 42001

Health SaaS provider delivered three frameworks in an integrated management system in 10 weeks — unlocking enterprise health system contracts.

Read case study →

Free monthly digest

Get the monthly Australian compliance digest

Practical updates on Privacy Act changes, Essential Eight revisions, ISO 27001 news, and real implementation tips — once a month, no spam.

Not sure which resource to start with?

A free 30-minute call will tell you which framework applies to your situation, what your most important gaps are, and what the fastest path to audit-ready looks like. No obligation.

Start a free checklist Book a free call