01 — Know what you own
Accounts, suppliers and administrator access.
Document the domain, cloud tenant, website, internet service and critical suppliers—with protected recovery routes that do not depend on one person.
Small-to-medium businesses
Small business IT services without the confusion or lock-in.
Suburban Secure provides practical small business IT services across Australia, including Microsoft 365 and Google Workspace security, networks, devices, backups, email protection and technology planning. We begin by understanding what you already have, what is fragile and what actually needs attention. You receive clear priorities and documentation before committing to products, projects or an ongoing provider.
What the review covers
- Microsoft 365 tenant hygiene: global admins, break-glass access, MFA, security defaults and audit logging.
- Owner and manager education so security hygiene is understood, not just configured once.
- Email, DNS, SPF, DKIM, DMARC, phishing resistance and account recovery review.
- Ongoing monitored DMARC to move enforcement from configured to actively watched.
- Cloud file sharing, retention, permissions and offboarding processes.
- Internet, telephony, hosting, licensing and software cost review.
- Network, Wi-Fi, device management and backup posture review.
- Field or mobile teams: business-owned iPad or iPhone devices ready for work from first setup — see Apple Device Management.
- Trades and construction businesses: field devices, site Wi-Fi and subcontractor access — see Trades and Builders.
- Documented policy and compliance obligations when a client, insurer or funder asks for evidence — see Governance, Risk and Compliance.
- Staged recommendations that fit the size and cashflow of the business.
Good first step
A leadership technology review maps what exists, explains the risk in plain English, and gives your team a staged roadmap before any implementation decision.
Request a reviewOr check yourself against our Small Business Cyber Security Hub checklist, or run the free business cyber security check on your own domain.
Free cyber incident response plan
Give your team a calm process to follow—even when a leader is unavailable.
Build it online, add your own contacts and operating details, then print it or save it as a PDF. No signup; entries stay in your browser.
Create the free planUseful for small teams
Clear first actions, escalation contacts, recovery steps and short playbooks without turning a practical plan into an enterprise manual.
The foundations, one layer at a time.
Scroll through the four layers that turn disconnected products into an IT environment the business can actually operate and recover.
02 — Protect daily work
Email, identities, devices and networks.
Apply proportionate controls to the systems staff use every day, without buying layers of tools that duplicate what is already licensed.
03 — Be ready to recover
Backups are useful only when restoration is understood.
Set recovery order, retention, ownership and testing so the plan still works during a lost device, account lockout, outage or cyber incident.
04 — Choose the right support
Match the service model to the actual operating need.
Use occasional support, a managed provider, internal capability or a combination—backed by documentation that remains with the business.
Read the seven-function guide
Free, instant, no signup
See what a scammer could already fake about your business.
Enter your business domain and get a free, instant, plain-English snapshot of your email, DNS and website security — no signup, no obligation, and an honest note on what a free check can't see.
Run the free check
Designed to reduce operational drag.
The scope adjusts to your organisation's actual environment — from email security and cloud governance to network infrastructure, mobile devices, cameras and volunteer access.
Want more than a one-off review?
A Leadership Technology Review is the right starting point for most small-to-medium businesses, but some need an ongoing plan covering cyber protection, staff training, backup and disaster recovery. Managed IT Services covers that ground as fixed-price project work — scoped through an audit, not sold as an open-ended monthly contract.
A master plan, not a subscription
See what's included, and what it should cost, before you sign anything.
Managed IT ServicesQuestions we hear from small-to-medium businesses.
Why is having just one Global Administrator for Microsoft 365 a problem?
A single administrator can become a point of failure, while a shared administrator login makes activity difficult to attribute. We review named accounts, appropriate role separation, MFA and documented emergency access. These reduce the risk of account loss or misuse; they cannot guarantee access during every provider outage.
We think we've lost access to our own Microsoft 365 tenant — what now?
We first confirm the organisation’s ownership and what access still exists, then assess the available recovery options. Recovery depends on the circumstances and the provider’s verification process. A tenant review can improve administrator access and recovery documentation afterwards.
Are we locked into whatever brand of network gear we already have?
No, and we don't sell one brand either. Most of what we do is untangling technology decisions made piecemeal over years — a router bought on special, an access point added when the Wi-Fi "felt slow", a switch nobody remembers configuring. We work across Ubiquiti, TP-Link Omada, Netgear and GLiNet, among others, chosen for what actually fits the site, budget and complexity — a small office and a multi-building campus rarely want the same gear. The goal is a network that's secure, manageable and scalable, not a particular logo on the box.
Does the Privacy Act actually apply to our small business?
Not automatically. The Privacy Act 1988 generally only applies to businesses with annual turnover over $3 million, but there are common exceptions that catch smaller organisations anyway — including businesses that trade in personal information, provide health services, or are contracted to deliver services for the Australian Government. Charities registered with the ACNC have separate governance standards regardless of size. This isn't a substitute for legal advice, but it's exactly the kind of question a GRC review or Leadership Technology Review works through with you.