Multi-factor authentication
MFA on email, remote access and admin accounts, which blocks most account takeover attempts.
Cybersecurity · Essential Eight
Protect patient data with Essential Eight security.
Healthcare is one of the most targeted sectors for cyber attacks in Australia. We put practical controls in place that reduce the risk of ransomware, email fraud and data breaches, then help you prove it.
From $75 per screen, per month. Compare plans
What's included
Layered protection for every screen
Patching
Windows, browsers and common applications kept up to date on a regular schedule, tested before rollout.
Endpoint protection
Managed antivirus and threat detection on every covered computer, monitored around the clock.
Email security
Filtering for phishing, spoofed invoices and malicious attachments before they reach staff inboxes.
Admin rights control
Staff work without local admin rights, so malware has less room to spread.
Staff awareness
Short, practical guidance so reception and clinical staff can spot suspicious emails and calls.
Why it matters
The Essential Eight, explained for practices
The Essential Eight is the Australian Signals Directorate's baseline set of cyber controls. It isn't mandatory for private practices, but it is the clearest way to reduce risk and show insurers you take security seriously.
Maturity levels 0 to 3
We assess where you are today against each of the eight controls and agree a realistic target, usually Maturity Level 1 or 2.
Prioritised roadmap
Fixes are ordered by risk reduction and cost, so the most important controls go in first.
Breach response plan
A written plan for what to do if something goes wrong, including when the Notifiable Data Breaches scheme applies.
Evidence for insurers
Cyber insurers increasingly ask about MFA, backups and patching. We give you the answers in writing.
Questions
Cybersecurity FAQs
Is the Essential Eight mandatory for medical practices?
No. It is mandatory for many government agencies but not for private practices. It is still the most widely recognised baseline in Australia and a sensible target for any practice.
What happens if we have a data breach?
If a breach is likely to cause serious harm, the Notifiable Data Breaches scheme requires you to notify affected individuals and the OAIC. We help you contain it, assess it and respond.
Will security changes slow down our doctors?
We design controls around clinical workflows. For example, MFA prompts can be set to trusted devices so doctors aren't interrupted between every patient.
Related services
Often paired with
Find your Essential Eight starting point.
We'll assess your practice against the eight controls and give you a prioritised, costed plan.