Secure systems for organisations carrying community trust.
Charities often handle sensitive community, donor and operational data with lean budgets and changing teams. The work is to make systems secure, affordable and easy enough for staff and volunteers to keep using correctly.
What the review covers
- Cloud and email setup using eligible non-profit programs where appropriate.
- Identity, MFA, administrator roles and offboarding processes.
- Mobile device management for staff laptops, shared devices, phones and tablets.
- Telephony, internet, hosting, software and licensing review to reduce duplicated spend.
- Device procurement and reuse planning for staff, volunteers and shared workstations.
- Website, hosting, forms, CRM and donor platform risk review.
- Ongoing monitored DMARC so your domain can't be used to scam your own donors.
- Virtual CIO oversight for boards and committees without in-house IT leadership.
- Policies and handover documentation that reduce reliance on one technical person.
- Support coordinators, plan managers and care providers: participant data protection and audit-ready documentation — see NDIS Providers.
- Governance, risk and compliance work mapped to ACNC governance standards, not a generic template.
Good first step
A leadership technology review maps what exists, explains the risk in plain English, and gives your team a staged roadmap before any implementation decision.
Request a reviewOr run the free charity cyber security check, or read our charity and NFP cyber security checklist.
Free cyber incident response plan
Give your team a calm process to follow—even when a leader is unavailable.
Build it online, add your own contacts and operating details, then print it or save it as a PDF. No signup; entries stay in your browser.
Create the free planUseful for small teams
Clear first actions, escalation contacts, recovery steps and short playbooks without turning a practical plan into an enterprise manual.
Free, instant, no signup
Give your charity leaders a simple starting point.
The free cyber security check looks up an ABN or ACNC-listed name, reuses a recent scan where one exists, and shows a plain-English public email, DNS, domain and website snapshot — free, instant, no account required.
Run the free charity check
Designed to reduce operational drag.
The scope adjusts to your organisation's actual environment — from email security and cloud governance to network infrastructure, mobile devices, cameras and volunteer access.
Want more than a one-off review?
A Leadership Technology Review is the right starting point for most charities and not-for-profits, but some need an ongoing plan covering cyber protection, staff training, backup and disaster recovery. Managed IT Services covers that ground as fixed-price project work — scoped through an audit, not sold as an open-ended monthly contract.
A master plan, not a subscription
See what's included, and what it should cost, before you sign anything.
Managed IT ServicesQuestions we hear from charities and not-for-profits.
We offer free guest Wi-Fi — is it actually secure?
Only if it's genuinely separated from the network your files, printers and staff devices sit on. Many volunteer- or staff-configured guest networks skip that separation entirely, which means a guest could potentially see what's being printed or reach other devices on the network. It's a quick thing to check properly — ask whether your guest Wi-Fi is on its own VLAN or subnet, and if nobody's sure, that's the answer.
Do we need a big budget to get proper cyber security help?
No. Suburban Secure is built around a "pay it forward" approach — the first conversation is genuinely useful even before any paid engagement, and reviews and projects are scoped and fixed-price so you know the cost upfront. The goal is practical, right-sized security, not enterprise theatre your organisation doesn't need.
How does Suburban Secure already know about our charity when we run the free check?
We use the ACNC's public charity register, which lists basic details for every registered charity in Australia. When you search your charity by ABN or name, we're matching against that public list, not any private data we've collected about you. Nothing beyond public register and public DNS/website information is used, and running the check doesn't sign you up to anything.
What does "cyber security GRC" actually mean, and do we need it?
GRC stands for governance, risk and compliance — in plain terms, having a documented policy for how your organisation handles technology and data, a real picture of what could go wrong, and a clear answer to what you're actually required to do. Most small organisations already do some of the technical work (MFA, backups, updates) but have never written any of it down, which becomes a problem the moment a funder, insurer, board member or auditor asks for evidence rather than an assurance. See Cyber Security Governance, Risk and Compliance.