We build your security to the SMB1001:2026 standard.
We install endpoint protection, email filtering, multi-factor authentication, firewalls and patching, then watch the alerts they raise and respond to them from Southport and Toowoomba. Each engagement, for a client on the Gold Coast, in Brisbane or in Toowoomba, starts with an Evolve Technologies audit against the SMB1001:2026 framework.
The controls we put in place.
Each control below is either a product we install and manage or a process we run on a schedule. The full stack is set out in our cybersecurity brochure (PDF).
Ten questions on your security basics.
Each question covers one control we check in an IT review. You can answer them without logging in to anything, and the score tells you where to start.
Do your staff need a second step, like a code or an app prompt, to sign in to email and key systems?
Does your team keep passwords in a password manager instead of a spreadsheet or a shared document?
Has anyone restored files from your backups in the last six months to prove they work?
Does every computer in the business, including any servers, have security software that someone actively monitors?
Is your email filtered for phishing and fake-invoice scams before it reaches staff inboxes?
Are software updates applied promptly across all your computers, including any servers?
When someone leaves the business, are their accounts and access switched off the same day?
Has your team had any training on spotting scam emails in the last year?
If your systems went down right now, is there a written plan for who does what?
Do you know exactly who has administrator access to your systems, and is it limited to the people who need it?
0 of 10 answered
We check each of these on your own systems as part of an IT review.
Most of the basics are in place.
The controls you answered yes to cover the ways most small-business breaches start. The ones to watch are those that depend on a person remembering, such as restore tests and switching off leavers, so we check those again at each review.
About half the basics are in place.
Each no above is a control we would list in an IT review report, and each not sure goes in as a check. MFA, email filtering and tested backups usually come first in that list because they stop the most common attacks.
Most of the basics are still to do.
Several of the ten controls are missing or unconfirmed. An IT review records which systems and accounts each one applies to and gives you a costed order of work, with MFA and backups first.
We document your maturity against each SMB1001:2026 domain.
SMB1001:2026 is the Australian cybersecurity framework written for small-to-medium businesses.
It covers governance, identity and access, data protection, configuration hardening, backup and recovery, training and incident response. We assess you against each domain, record the result and review it with you.
A new engagement starts with an audit.
The audit checks each of the controls above against your environment and ranks the gaps by risk.
We close the gaps in priority order and then take on managing the tooling, because controls drift when nobody owns them. Alerts get muted and exclusions pile up.
Each incident type has a documented procedure.
Ransomware, a compromised account and a notifiable data incident each have a procedure on file that names who leads the response and which stakeholders are told at what point.
Clients who have used one received their systems back and a post-incident report covering the cause and the changes made.
We put matching firewalls into a regional builder's four offices.
One network across four offices for a regional builder
A construction company with offices in Southport, Robina and two Toowoomba locations had set each site up on its own, and files moved between them as email attachments and on USB drives. We put matching firewalls into each office, joined them with site-to-site VPNs, rolled out managed Wi-Fi with a separate visitor network at each site, and gave project managers secure remote access to the shared drives and estimating software from the office or a site cabin.
Read the full story: One network across four offices for a regional builderThese questions come up in a security audit.
Which vendors does Evolve Technologies work with?
Is our data secure when Evolve Technologies has access to our systems?
What cybersecurity services does Evolve Technologies provide on the Gold Coast?
Is Evolve Technologies a Sophos partner?
Does Evolve Technologies help with cyber insurance requirements?
Modern Work
Get your controls audited against SMB1001:2026.
The Evaluation covers the controls on this page and hands you a ranked list of the gaps.