CYBERWHITE Blog
Security and compliance guides and news for businesses, IT teams and the providers who support them.
- MSP Insights··5 min read
AI usage policy for clients: a one-page quick win for MSPs
Staff are already pasting client data into public AI tools. Here is a one-page AI usage policy, the setup steps, and how to sell it as a fixed-price job.
By Pardeep Sharma
- MSP Insights··5 min read
Microsoft 365 price rise: a client script for MSPs
Microsoft 365 prices rose on 1 July 2026 and clients feel it at renewal. Here is what to check, what to say, and how to tie the rise to proof.
By Pardeep Sharma
- MSP Insights··6 min read
Supplier security questionnaire: how to answer it in a day
A customer sent a supplier security questionnaire and wants it back this week. Build one answer library and an evidence folder once, then reuse them.
By Pardeep Sharma
- Essential 8··5 min read
Government tender and DISP: the Essential 8 evidence pack to build
Tenders and DISP now ask suppliers to prove Essential Eight Maturity Level 2. Here is what to put in the evidence pack, and how an MSP builds it in 4 weeks.
By Pardeep Sharma
- MSP Insights··5 min read
Cyber insurance questionnaire: an MSP walkthrough for renewal season
Cyber insurance renewals start in December. Here are the questions insurers ask, what each one means, and the evidence an MSP should attach to every answer.
By Pardeep Sharma
- SMB1001··5 min read
SMB1001 Gold for MSPs: an 8-week plan to take one client to Gold
Gold is the highest SMB1001 tier an MSP can deliver without an outside auditor. Here is a week-by-week plan for one client, with the evidence to keep.
By Pardeep Sharma
- MSP Insights··6 min read
Microsoft is retiring SMS MFA: a passkey rollout plan for MSPs
Microsoft stops providing SMS and voice MFA in Entra from 1 February 2027. Here is a four-step passkey rollout an MSP can run across every client tenant.
By Pardeep Sharma
- MSP Insights··5 min read
The evidence problem: you did the security work, but can you prove it?
Insurers, assessors and buyers now ask for proof, not promises. Here is the five-item evidence pack an MSP can build for each client, starting this month.
By Pardeep Sharma
- MSP Insights··5 min read
Windows 10 ESU ends 13 October 2026: what to tell your clients
Windows 10 security updates via ESU end on 13 October 2026 for most buyers. Here is how to sort client PCs, price the options and document the risk in writing.
By Pardeep Sharma
- SMB1001··4 min read
SMB1001:2027: What Changes for Your Business (and What to Do Now)
SMB1001:2027 is out. Your current certificate still counts. Here is what the new edition means in plain English, who it affects, and the first step for each change.
By Pardeep Sharma
- SMB1001··4 min read
SMB1001:2027 for MSPs: What to Do With Your Clients This Quarter
SMB1001:2027 names the Technical Support Specialist as a role and tells small businesses to start with their MSP. Here is what that means for you and a five-step plan for your client base.
By Pardeep Sharma
- MSP Insights··6 min read
ASD now expects an AI agent register. Here is what that means for a small business
The September 2026 ISM update added eight AI agent controls, and ASD published agentic AI guidance on 11 September. A plain-English guide for Australian businesses and the MSPs who look after them.
By Vikram Kukreja
- Essential 8··9 min read
The Essential 8 Maturity Model Explained (ML0 to ML3)
The Essential 8 Maturity Model is the ACSC's framework for scoring how well you've implemented the eight strategies. Here's how ML0 to ML3 works.
By Vikram Kukreja
- Essential 8··9 min read
Essential 8 Audit: What to Expect
Essential 8 audit guide for Australian businesses: what assessors check at ML1, ML2, and ML3, and how to prepare faster.
By Vikram Kukreja
- SMB1001··6 min read
SMB1001 Maturity Levels: Bronze to Diamond for Australian SMBs
SMB1001 maturity levels run from Bronze to Diamond across five tiers. This guide explains what each level requires, how they build on each other, and how to choose where to start.
By Vikram Kukreja
- SMB1001··11 min read
SMB1001 Certification in Australia: Bronze, Silver, Gold and Beyond
SMB1001 certification in Australia: the five tiers from Bronze to Diamond, who needs certification, what evidence each tier requires, and how self-attested tiers differ from independently verified ones.
By Vikram Kukreja
- Essential 8··8 min read
Essential 8 Patch Management Guide
Essential 8 patch management covers two ACSC controls: patch applications and patch operating systems, with different timelines per maturity level.
By Vikram Kukreja
- Essential 8··10 min read
How an Essential 8 Assessment Works: Process, Evidence and Timelines
How the Essential 8 assessment process works: self-assessment vs third-party, the evidence assessors expect, common gaps, and how long each stage takes.
By Vikram Kukreja
- Essential 8··8 min read
Essential 8 Maturity Level 2: What Changes from ML1 and How to Get There
Essential 8 maturity level 2 adds phishing-resistant MFA, server-level application control and centralised event logging to ML1. Here is what each strategy requires at ML2.
By Vikram Kukreja
- Essential 8··7 min read
Essential 8 Application Control: ML1, ML2 and ML3 Requirements Explained
Essential 8 application control stops unapproved code from running. Learn ML1, ML2 and ML3 requirements for Australian SMBs on Microsoft 365.
By Vikram Kukreja
- SMB1001··8 min read
SMB1001 Bronze Checklist: How an Australian SMB Reaches Bronze in 30 Days
A practical SMB1001 Bronze checklist for Australian small businesses: what Bronze covers, the fastest sensible order to do it, the evidence to keep, and a 30-day plan.
By Vikram Kukreja
- Essential 8··9 min read
Essential 8 ML1 Checklist: What an Australian SMB Actually Needs to Pass
A control-by-control essential 8 ml1 checklist for Australian SMBs: exact ACSC patch timeframes, MFA, macros, backups, and the failures that fail audits.
By Vikram Kukreja
- Essential 8··9 min read
Essential 8 MFA Requirements: What Counts, What Doesn't, and Phishing-Resistant MFA
Essential 8 MFA requirements explained by maturity level: which methods satisfy ML1, ML2 and ML3, why SMS is discouraged, and how to enforce phishing-resistant MFA in Microsoft 365.
By Vikram Kukreja
- Essential 8··10 min read
Essential 8 Maturity Levels Explained: ML1 vs ML2 vs ML3 (and Which You Need)
A plain-English guide to the essential 8 maturity levels (ML1, ML2, ML3): what each level mitigates, why they are cumulative, and which one your business needs.
By Vikram Kukreja
- MSP Insights··9 min read
Delivering Essential 8 as an MSP: Turning Compliance into Recurring Revenue
A practical playbook for essential 8 for msps: productise multi-tenant assessment, evidence, and remediation into a recurring managed compliance service.
By Vikram Kukreja
- SMB1001··5 min read
Essential 8 vs SMB1001: Which One Should an Australian SMB Start With?
Honest breakdown of Essential 8 and SMB1001 for Australian SMBs. When to start with Bronze, when to jump to ML1, and how the two standards work together.
By Vikram Kukreja
See where you stand
Take the free Essential 8 self-check, or book a demo to see how CYBERWHITE works.