Knowing where you stand is half the battle. We work with you to uncover and prioritise your organisation’s risks based on operational realities, compliance requirements and business goals.
years testing for government and enterprise
CREST-accredited through CREST ANZ
Our structured assessments align with recognised standards: ISO 27001, PCI DSS, the CIS Controls and the ACSC Essential Eight.
They identify systemic weaknesses, scope compliance efforts and support confident, risk-informed decisions. No silver bullets, no guesswork.
Each service links to its own page with the detail.
Our team is led by experts including ISO 27001 lead implementers and lead assessors, and dotSec is ISO 27001 certified itself, so our assessors have walked the compliance walk.
We help clients build and maintain working ISMSs that support compliance and prepare for certification, reassuring clients and partners who prioritise security and risk governance.
We are a PCI QSA Company and a PCI DSS-compliant service provider, so our assessors have first-hand experience achieving and maintaining compliance.
We understand the challenges businesses face in meeting PCI DSS requirements, including in the Australian regulatory context.
A capability maturity review measures how well your security processes and controls are designed, managed and improved over time, and builds a roadmap for improvement.
Depending on your needs, reviews reference ISO 27001, PCI DSS, the CIS Controls or the Essential Eight, with the Australian Privacy Principles and NIST CSF where useful.
A tabletop exercise (TTX) is an interactive simulation that tests your incident response plan, capabilities and processes in a safe, controlled environment.
It shows where detection, containment and response need work, without the disruption and cost of an adversary emulation test.
Effective cyber security is a cycle: identify and prioritise your risks, apply controls that address them, then verify the controls work, and repeat as your risks change. See all our governance, risk and compliance services.
Want a clear, prioritised view of your cyber risk? We will scope an assessment around your standards, operations and goals.
Once risks are prioritised, the next step is applying controls that address them.
