A cyber security team that also runs your IT.
Most providers are an IT company that added security as a line item. Red Flagg™ is the other way round - and that is the point. The person who sets up a new starter is the person who decides what that account can reach. Split those two jobs across two suppliers and nobody owns the gap.
Cyber Security
The whole programme, run and maintained by Cyber Analysts. Not a product you are resold and left to configure.
- Cyber awareness training, delivered and refreshed
- Phishing simulation campaigns
- MailCheck™ - a Cyber Analyst checks suspicious email
- DarkWebCheck™ monitoring for exposed staff details
- Microsoft 365 security administration and hardening
- Email security baseline - SPF, DKIM and DMARC
- Multi-factor authentication set up and kept on
- Secure delegated admin access (GDAP)
- Essential Eight controls, implemented and maintained
- Incident triage and containment support
- Penetration testingproject
- Wi-Fi security auditsproject
What is included depends on your plan. The comparison further down sets out which plan carries what, and anything marked project is quoted separately.
Service desk
Your people get an answer, not a queue.
- New starters set up, leavers closed off properly
- Mailboxes, shared mailboxes and groups
- Passwords, lockouts and sign-in problems
- Everyday requests, tracked to a written answer
Microsoft 365
Your tenant run properly, every day.
- Full Microsoft 365 administration and housekeeping
- Licences assigned, tracked and reconciled
- Access and permissions reviewed
- Setups, migrations and clean-upsproject
Governance
Evidence your board can table.
- Quarterly reporting, written to be tabled
- Control status and Essential Eight progress
- Cyber security posture reviewsproject
- Board readiness assessmentsproject
What stays with you is the decision. We bring you the option, the risk and the cost in plain English. Nothing changes in your environment without your sign-off.
Open 8am to 8pm, 7 days.
Not an inbox somebody checks when they get a minute. A staffed desk, where every request becomes a tracked ticket with a reference, an owner and a written answer from a Cyber Analyst. A person picks it up within 30 minutes.
Within support hours. We call these response targets rather than guarantees, because that is what they honestly are - we would rather spend the money fixing the problem than on a penalty clause.
Managed to a standard. Not to an opinion.
Your insurer asks at renewal. Your funders ask. Your board asks after the fact. None of them will accept "our IT person handles it" - so we do not secure you to our own checklist. Your programme is built on CIS Controls v8.1 - an international standard, published and maintained by somebody other than us.
18 controls · 153 safeguards
CIS Controls v8.1
Published and maintained by the Center for Internet Security and used worldwide. It is the framework the whole programme is run and measured against, not a marketing badge.
56 safeguards
Implementation Group 1
What CIS calls essential cyber hygiene, written for organisations without a large IT team. That is where we start you, and what we work you through first.
Mapped, not duplicated
Essential Eight and NIST CSF 2.0
Essential Eight is the Australian baseline your board and your funders will ask about. It sits inside the same work, so you get one programme reported three ways.
How much of it do you want to hand over?
The only real difference is how much of the work we carry, and how long the desk is open to you.
Business Protect
You have the IT side covered and want your people trained, tested and reported on.
- Cyber security
- Awareness training, phishing simulations, MailCheck™ and quarterly reporting
- Microsoft 365
- Not included on this plan
- Desk
- Business hours
Business Plus
You hold donor, customer or financial data, or something has already gone wrong once.
- Cyber security
- Everything in Protect, plus DarkWebCheck™ and the 10 Level 0 controls
- Microsoft 365
- Security administration
- Desk
- 8am to 5pm, weekdays
Business Shield
You are audited by funders or regulated, and you want one team to own all of it.
- Cyber security
- Everything in Plus, plus the 48 Essential Eight controls
- Microsoft 365
- Full administration, end to end
- Desk
- 8am to 8pm, 7 days, named analyst
Per seat, billed monthly. From $250 a month. NFP rates on every plan. No lock-in.
Tell us how many people you have and what is currently held together by one person, and we will tell you what handing it over looks like - including what it costs you to stay as you are.