Independent cyber security for small business.
NOVA SEC AUSTRALIA
Nova Sec is an independent cyber security consultant for Australian small and medium business. Your business has security and privacy obligations, from law, from clients, from your insurer. I work out which ones apply, what meeting them looks like, and put it in place.
SMB1001:2025 Gold certified. We hold the standard we assess against.
No commissions. No rebates. No margin on software.
Fixed fee, agreed before we start.
What usually prompts the call
A client's security questionnaire. An insurer wanting evidence before renewal. A tender naming a standard you have not been through. Or nothing formal, just no way to check whether what you have is enough.
What we do
We take no commission, no rebate and no margin on software. Licences get passed through at public cost with the line items shown, and there is no ongoing IT service contract at the end of it.
Endpoint protection, patching and MFA are worth having, and most of them sit unused in licences you already pay for. Switching them on is a different question to knowing they're the right things to switch on.
Two ways this usually starts
You know what you need. A client asked for SMB1001. A tender named ISO 27001. Staff are pasting client files into ChatGPT and you want that sorted. Someone left and you are not sure what access they still have. We scope that piece and quote it.
You are not sure what you need. A gap assessment establishes where you stand, what applies to you, and what to fix first. Quoted before we start, and you own the findings whether or not you do anything else with us.
Frameworks we work with
SMB1001, Bronze through Gold. ISO 27001 implementation. Essential Eight. Client security questionnaires and supplier assessments.
How the first engagement runs
You book a call. We ask what prompted you to look, and what has already been asked of you.
If a gap assessment fits, you get a control-by-control position, the evidence you already hold, and the evidence you are missing.
You choose whether to fix it yourself or hand it to us. The assessment stands on its own either way.
Where your obligations come from
Australian privacy law. Contracts and questionnaires your clients send you. Your insurer at renewal. A standard a tender named. Which of those reach your business depends on your size, your industry and who you work for.
Free, practical security advice for small businesses
Every week or so I explain something from the news, what it means for a business your size, and one thing you can check yourself in five minutes.
I'll only use your address to send The Check. Unsubscribe from the link in any issue. Privacy policy