Analysis on AI, cybersecurity, and risk — written for Australian and New Zealand business owners, and meant to be checked rather than believed.
Xero, MYOB and Microsoft 365 now process client data through embedded AI by default. New Tax Practitioners Board guidance flags the compliance gap — and it affects every business that uses them.
Only 30% of Australians think AI's benefits outweigh the risks — the lowest of any country. The fix for that caution is also what unlocks the returns.
Australian SMEs lose an average of $56,600 per cybercrime report. Cover is cheaper than it was, but insurers now want evidence of controls before they sign.
From 10 December 2026, businesses using AI in decisions that affect customers must disclose it in their privacy policy. Government data shows most aren't ready.
Edge devices — firewalls, routers and VPN gateways — are now a primary way attackers get into Australian SMEs. The fix is unglamorous: patch, replace, and turn off what you don't use.
PwC found 74% of real financial returns from AI go to just 20% of companies. The dividing line isn't the technology — it's whether you redesign how work gets done.
Australia's statutory tort for serious invasions of privacy turns one on 10 June. The first court test confirms it has teeth — and SMEs are exposed.
New CSIRO research finds Australian firms that adopted AI posted 36% more jobs than non-adopters. The real divide isn't humans versus machines.
69% of Australian organisations already use AI agents. Only 22% have adequate governance. New joint government guidance published this week explains the risks.
BEC fraud now accounts for 15% of all business cybercrime in Australia, with medium businesses losing an average of $97,166 per incident. The defence isn't a tool — it's a process change.
49% of employees use unsanctioned AI tools at work. In Australia, 92% of leaders say that introduces risk. Here's what to do before a shortcut becomes a breach.
Anthropic's Claude Mythos found thousands of critical vulnerabilities across every major OS and browser. Here's what Australian business owners need to know — without the hype.
Australia's privacy regulator launched its first-ever compliance sweep in January 2026, reviewing 60 businesses across six sectors. With new powers to issue $66,000 infringement notices without going to court, the enforcement era has arrived.
Most Australian small businesses are using AI, but a Deloitte study found just 5% are fully equipped to benefit. The culprit isn't the technology — it's workforce capability.
Australia's mandatory ransomware payment reporting law entered active enforcement in January 2026. If your turnover exceeds $3 million, a 72-hour reporting clock is now ticking after any ransom payment.
Only 37% of Australian SMEs are actively adopting AI, yet businesses that do are seeing up to fourfold productivity gains. Here's what decision-makers need to know about closing the gap.
Ransomware made up 34% of Australia's most damaging cyber incidents last year, with average payments reaching $1.35 million. Here's what your board needs to know.
Australia launched its National AI Plan in December 2025, introducing new governance frameworks and an AI Safety Institute. Here's what business leaders need to understand about compliance and opportunity.
Only 22% of assessed entities have reached Maturity Level 2 across all eight strategies. With cyber insurers now demanding E8 compliance, the gap is becoming a business risk.
State-sponsored actors and criminal groups are increasingly targeting supply chains. With regulators holding companies accountable for vendor security, it's time to rethink third-party risk.
51% of Australian organisations have already encountered AI-powered cyber threats. From deepfake scams to prompt injection attacks, the threat landscape is evolving fast.
We're always happy to have a conversation — no obligation, no sales pitch.
Find out if it's worth doing