Compliance, Simplified.

Frameworks and certifications that open enterprise doors. Methodology that matches the Big 4, priced for Australian SMB growth.

87%

of SMBs tested failed E8 ML1

Most organisations have no idea their cybersecurity controls fall below the minimum maturity level.

72hr

ransomware reporting deadline

The Cyber Security Act 2024 requires businesses over $3M turnover to report ransomware payments within 72 hours.

$1.8M

maximum Privacy Act penalty

Non-compliance with Australian Privacy Principles carries significant financial penalties for businesses.

Services & Pricing

Know where you stand. Prove it to anyone who asks.

All prices in AUD. Final quote provided after a scoping call.

Frameworks & Certification

Essential Eight Gap Assessment

Maturity Level 0–3 scoring across all 8 strategies with remediation roadmap.

From $8,500

Delivery: 10–15 business days

SMB1001 Certification Support

Bronze to Diamond certification pathway. Australia's answer to UK Cyber Essentials.

$1,200 – $4,000

Delivery: 2–4 weeks

Microsoft 365 E8 Hardening

ACSC-aligned M365 configuration across all 8 Essential Eight strategies.

$2,500 – $4,500

Delivery: 3–5 business days

Privacy Act & NDB Readiness

Full 13-APP gap assessment, NDB flowchart, and policy templates.

From $3,500

Delivery: 5–7 business days

Risk & Readiness

AI Security Risk Assessment

Inventory and privacy assessment of all AI tools in your business.

From $1,997

Delivery: 2–3 business days

Cyber Insurance Readiness

Structured evidence pack mapped to standard insurer application questions.

From $1,997

Delivery: 1–2 business days

Ransomware Readiness & IR Plan

Incident response plan covering the 72-hour reporting obligation under the Cyber Security Act 2024.

$2,500 – $4,000

Delivery: 3–5 business days

Need penetration testing too?

Our VAPT + Essential Eight bundle starts at $18,500 and saves $2,500 versus booking separately. Full offensive security and compliance in one engagement.

See Cyber Studio

Our Process

Four steps to compliance confidence.

01

Scoping Call

30 minutes to understand your obligations, environment, and timeline.

02

Evidence Collection

Intake questionnaire, external scanning, and documentation review.

03

Assessment & Scoring

Gap analysis against the relevant framework with maturity scoring.

04

Report & Roadmap

Plain-English findings, remediation priorities, and insurance-ready evidence.

Frequently Asked Questions

What is an Essential Eight Gap Assessment?+
The ASD Essential Eight is Australia's baseline cybersecurity framework covering eight strategies. Our gap assessment benchmarks your current controls, scores your maturity level (0–3), and produces a remediation roadmap with cyber insurance evidence. Starts at $8,500 AUD.
Do I need Essential Eight compliance for cyber insurance?+
Increasingly, yes. Cyber insurers now require evidence of Essential Eight Maturity Level 1 or higher. Without documented controls, premiums rise significantly or coverage is declined entirely. Our assessment produces the documentation your insurer needs.
What is SMB1001 and why should I get certified?+
SMB1001 is Australia's purpose-built cybersecurity certification for small and medium businesses — like the UK's Cyber Essentials. Bronze certification is free via Cyber Wardens. Silver and Gold are recognised by insurers and procurement panels. rabbiico supports your journey from Bronze to Diamond.
Is my business affected by the Privacy Act changes?+
If your business has annual turnover over $3M and collects personal information, yes. From May 2025, ransomware payments must be reported to the OAIC within 72 hours. Privacy Act reforms are increasing obligations significantly. Our readiness assessment covers all 13 Australian Privacy Principles.
What does Cyber Insurance Readiness include?+
We map your current security controls against a standard Australian cyber insurance application (40–60 control questions), produce a structured evidence package, and identify gaps that could cause premium loading or decline. Starts at $1,997 AUD.
Can I bundle compliance services with penetration testing?+
Yes. Our VAPT + Essential Eight bundle starts at $18,500 and saves $2,500 versus booking separately. Visit our Cyber Studio page for penetration testing tiers and bundle details.

Ready to get compliant?

Book a scoping call to discuss your compliance obligations and get a fixed-price quote — no obligation.

Book a Scoping Call