How Much Cyber Security Does a Tasmanian Business Actually Need?


By Penni Lamprey • October 21, 2026

How Much Cyber Security Does a Tasmanian Business Actually Need?

If you run a business in Tasmania, cyber security probably isn't the reason you get out of bed in the morning.


You've got customers to look after, staff to support and a business to run. You know cyber security matters. You've heard about ransomware, stolen passwords, dodgy emails and data breaches.


But there's a more useful question:


How much cyber security does your business actually need?


Because you can spend a lot of money on security and still not be particularly secure.

What is actually likely to go wrong?

For most Tasmanian businesses, the risk isn't a sophisticated overseas hacker. It's far more ordinary:


  • A convincing fake invoice, or an email that looks like it's from the boss asking for an urgent payment
  • A stolen or reused password
  • Ransomware getting in through a device that hasn't been updated, or a poorly protected remote connection
  • Someone clicking a link when they were busy


Most attacks on small and mid-sized organisations rely on everyday gaps, not clever technology. That's good news, because everyday gaps can be closed.

What does your business actually need to protect?

Good cyber security starts with understanding what matters to your organisation.


  • What information would cause a serious problem if it was lost or exposed?
  • What systems would stop the business operating if they went down?
  • Who has access to important systems and information?
  • Could you recover if something went wrong?
  • What do your customers, insurers and industry expect from you?


Those are business questions before they're technology questions.

What does good basic cyber security look like?

The foundations aren't glamorous. That's probably a good thing.


  • Multi-factor authentication on email and remote access
  • Systems and software kept up to date
  • Protection on every device
  • Backups that are tested, and kept separate from the systems they protect
  • Clear control over who can access what
  • Staff who know what a suspicious email looks like
  • A plan for what happens when something goes wrong


Frameworks such as the Essential Eight and standards such as SMB1001 give useful structure.



But ticking boxes isn't the end goal. The goal is a business that can protect what matters, keep operating and recover when something goes wrong.

Does every Tasmanian business need the same level of security?

No. A professional services firm, an NDIS provider and a growing manufacturer may all be Tasmanian businesses, but they don't carry the same risks. The information they hold is different. The consequences of an outage are different. Their obligations and customer expectations are different too.



So a one-size-fits-all package doesn't make much sense. Your security should be proportionate to your risk.

When do you need more than the basics?

A few signs it's time to look further:


  • You hold sensitive client or personal information
  • A contract, insurer or regulator expects a particular standard
  • You've had a near miss, such as a phishing email that almost worked
  • Your cyber insurance renewal asks questions you can't confidently answer


At that point it's worth a proper look at cybersecurity and risk, not another product.

Why does reputation matter so much in Tasmania?

Tasmania is a relationship-driven place to do business.


People know each other. Your customers know your suppliers. Your accountant might know your client. There's a decent chance you'll run into one of them at an event, over coffee or down the street.



That means trust matters. When a customer gives you information, they're trusting you to look after it. Cyber security is increasingly part of protecting that trust.

So, how much cyber security is enough?

There isn't one answer for every organisation. But your leadership team should be able to answer a handful of straightforward questions:


  • What are our biggest cyber risks?
  • What are we doing about them?
  • Where are our important gaps?
  • Could we recover if a critical system went down?
  • Who is responsible for making sure this actually happens?


If those answers are clear, you're having the right conversation. If they aren't, another security product probably isn't your first priority. A clear picture of where you stand is.


No scare campaign. No technology for technology's sake. Just a sensible understanding of the risks and a practical plan for dealing with them.

Not sure where your business stands?

Compago can help you take a practical look at where you stand, identify the gaps that actually matter and work out what deserves attention first.


Talk to Compago about your cyber security.

We Provide Intelligent Business IT

SHARE THIS

Latest Posts

Man Working on A Laptop in A Dim Office with Multiple Code Filled Monitors — Compago Technologies In Cambridge, TAS
By Penni Lamprey • October 21, 2026
Managed IT services or break-fix support? The real difference, the hidden cost of reactive-only IT, and which suits a Tasmanian small business.
Technician Adjusting Network Cables in A Server Rack, with A Laptop in A Blue Lit Data Center — Compago Technologies In Cambridge, TAS
By Penni Lamprey • October 21, 2026
What does IT support cost in Tasmania? What drives the price, what a quote should include, and how to compare providers on value, not just the monthly figure.
Business Team Reviewing a Tablet in a Blue Tech Corridor — Compago Technologies In Cambridge, TAS
By David Pretorius • October 14, 2024
This e-Book is a great summary for business owners to build out the Strategy for the underlying Technology. Most owners we talk to, reluctantly say they don’t understand the technology, so don’t want to ask questions. We want you to start asking questions! Feel free to download this PDF BELOW
Neon Green and Red Checkmarks — Compago Technologies In Cambridge, TAS
By David Pretorius • May 20, 2024
If you have any questions about how to implement thee above or how this all fits into overall Strategy and Governance, please visit this PAGE
Poster With Coffee Cup and Text — Compago Technologies In Cambridge, TAS
By David Pretorius • April 22, 2024
Here are some tips to help your staff with your password policy. Tip 1: Use Complex Passwords Think beyond birthdays or pets names. Use a combination of uppercase and lowercase letters, numbers and symbols. Tip 2: Don’t Reuse Passwords Keep your passwords unique for different apps. A data leak on one website can make all your applications vulnerable. Tip 3: Leverage Password Managers Remembering passwords is hard. Password managers securely store them and can even generate unique passwords for your applications. Tip 4: Enable Two-factor Authentication (2FA) Even strong locks can be broken. Enable 2FA on all your cloud apps to make it harder for criminals to gain access. Tip 5: Beware of Imposters Watch out for phishing emails impersonating familiar contacts. Clicking on links in these emails could put your business at risk. Feel free to download and print out this PDF for your staff training ->
Hand Holding Smartphone With Business Dashboard — Compago Technologies In Cambridge, TAS
By David Pretorius • March 4, 2024
Data Loss Prevention . It is extremely pleasing to see the Australian Government working hard on helping organisations with their overall Information Security Management. Home | Cyber.gov.au is an excellent website to bookmark. With the information constantly being updated on this site, I worry that organisations are falling farther behind, because Information Security Management still does not make its way into the overall Risk Management Strategy. As organisations, we seem to have implemented Work Health and Safety so very well, so how do we start getting the same uptake on Information Security Management? Some suggested steps . Elevate, across the entire organisation, the words being used; instead of the more technical word(s); cybersecurity, firewalls, application control -> think instead of the overall Information Security Management , ie The Owners or Board MUST manage the security of ALL information ! Start picking some risk areas to understand; I find this is an excellent first step in understanding “does my business actually have client’s personal data?“ and “how do I start securing that information“ -> Securing Customer Personal Data for Small to Medium Businesses | Cyber.gov.au Share that information and understandings across the entire organisation. The IT team might know this inside and out, BUT most likely the language is far too complex. Speak in non IT language, Speak in business language. SEEK UNDERSTANDING TO STAY COMPLIANT! Summary Some of those actions can be carried out by yourself, some ideally will be done in partnership with a Trusted Technology Solutions Provider. Links List of our Professional Services | Strategy & Governance | Compago Technologies
Cyber Readiness Strategies for Business — Compago Technologies In Cambridge, TAS
By David Pretorius • February 7, 2024
Strategic Technology Alignment e-Book PDF
Passenger Braces as a Child in Headphones Kicks His Seat — Compago Technologies In Cambridge, TAS
By David Pretorius • January 31, 2024
Lets reset expectations! Over the last 2-3 years, we have been working with our contracted clients on their compliance journey around Cyber Security, Essential 8 or ISO27001. The first step, is usually the hardest and most commonly, it involves getting EVERYBODY ( board, owners, exec’s, staff and IT ) to all agree that things ARE NOT 100% secure and compliant and that we need to start somewhere. It is much more important to be honest with what % compliance a company is currently at and having a plan to address the gaps VS pig headedness. The below image is a typical organization’s dashboard approximately 3 months into a monthly compliance engagement, in that, the board | exec’s are aware that; All requirements have been articulated, reviewed and selected from a relevant standard . All requirements have had possible controls identified that will meet the requirements . Of those controls , there are no “ unsure “, like there would be at the beginning of the process. The organisation is; 50% through the process BUT, depending on budget, timing and other business pressures, they might be 12 - 18 months away from 100% ready and expecting that Insurance companies will add extra requirements each year. aware that the Australian Government will continue to lift the awareness of cyber awareness ( Small business | Cyber.gov.au ) Summary Any small to medium business can start the journey, and the journey simply takes scheduled time and diligence BUT it will be a waste of time if the board or owners won’t take that HONEST first step of assessment. GREEN is the goal, but it starts with mostly RED .
Purple Event Banner With White Script Text — Compago Technologies In Cambridge, TAS
By Penni Lamprey • May 13, 2022
Compago Technologies and Eagle Crest Technologies are excited to announce a newly formed state-wide coverage partnership.
Blue Infographic With Five White Step Cards — Compago Technologies In Cambridge, TAS
By Penni Lamprey • December 2, 2021
Hands up if you seem to be doing things the hard way, or see your colleagues fly through their computer-based activities, pushing out image-rich presentations in record time that have no spelling or grammar issues - Do you wonder if there is a more intelligent way to work, or if there is an update for the PC user staring back at you? At Compago Technologies, IT Service Engineer, James wowed the marketing team recently with the snipping tool - we were awkwardly stuck in the '90s using screenshots, but couldn't find where we'd saved them. James literally changed our working day, you see the Print Screen button and the resulting images we were searching so dramatically for is a legacy holdout from the 90's, and now that we have multiple monitors attached to our computer the function gives you a gigantic file that you’re going to have to edit any way - insert another headache task, that keeps us productively slow. James explained that using the snipping tool to add small snippets into your documents/emails and presentations, was where all the intelligent IT cool cats were at - and above all, super easy. Our ears pricked up - snipping tool, you say... super easy - we are listening! James explained that by using the built-in Snipping Tool (or the updated version) Snip and Sketch you simply drag a selection box over what you want to be captured and it's done, already saved to your clipboard for pasting into a document using Ctrl V Honestly, it's that easy - give it a whirl right now. \ \ \ \ \ \ Oh, that's right, where would we find the snipping tool - Jaaammmeeesss...? This got us wondering what other gems does James have that will contribute to Intelligent Business IT? The stuff that you and your team (and to be honest, our entire marketing department) could greatly benefit from? James is a sought after team member - and it's not surprising, clients totally appreciate his knowledge sharing and great communication - so here are his top three PC productivity tips, four really when we circle back to the vintage screenshot scenario...five if you see the plug to getting things done.
Show More