For Brisbane businesses, Queensland Government suppliers and resources, construction and infrastructure organisations: cloud migration, IS18 and data-breach readiness, and senior engineering teams.
In short: Queensland's privacy and security rules changed recently. The mandatory notification of data breach scheme started on 1 July 2025 for state agencies and applies to local councils from 1 July 2026, and the Queensland Government's Information and Cyber Security Policy (IS18) v10 took effect in June 2026, requiring agencies to run an ISO 27001-based ISMS. We help Brisbane organisations and their suppliers meet both, and move workloads to the cloud.
Under the Information Privacy Act 2009 (Qld), agencies must notify affected people and the Information Commissioner of eligible data breaches. It started 1 July 2025, with councils joining on 1 July 2026.
The same reforms replaced the old principles with QPPs aligned more closely to the Commonwealth Privacy Act.
Queensland Government agencies must operate an ISMS based on ISO 27001, manage security risk systematically, and consider operational technology risk.
Resources, energy and infrastructure operators need OT security alongside IT. ASD's new Essentials series includes a dedicated OT chapter.
Private businesses covered by the Privacy Act 1988 must assess suspected breaches within 30 days and notify the OAIC of eligible breaches.
Queensland stays on AEST all year, so our India engineers' overlap with Brisbane never shifts: a constant 4.5-hour time difference.
Hosting in the Sydney and Melbourne regions of AWS, Azure and Google Cloud, with CDN edge delivery for Queensland users.
Cloud & DevOps →ISMS design for IS18, data breach response plans and registers, penetration testing and Essential Eight uplift.
Cyber security →24/7 monitoring, Microsoft 365 management, backup and disaster recovery with defined SLAs.
Managed IT →