Fixed-scope cyber engagements,
grounded in ACSC guidance
Targeted engagements for Australian individuals, families, and small-to-medium businesses. Every engagement scoped to one problem, anchored in ACSC, OAIC, ACCC Scamwatch, or eSafety Commissioner guidance, and delivered with a written report.
Engagements
Essential Eight Uplift — ML1, ML2, or ML3
Essential Eight is the Australian Cyber Security Centre's prioritised mitigation strategy set, assessed across three maturity levels. Cyber by Exegesis delivers uplift engagements at the maturity level that fits your business — ML1 for a baseline you can defend, ML2 for hardening against opportunistic attackers, ML3 for resilience against state-level adversaries.
Each engagement opens with a gap assessment against the named maturity level, produces a prioritised implementation plan, and closes with an evidence pack you can show to a customer, an insurer, or an auditor. We name the level honestly — never blur ML1 against ML2 to claim more than we've delivered.
The waitlist is open for SMBs across Sydney, Melbourne, Brisbane, Perth, and Adelaide. We sequence engagements by tenant type (Microsoft 365 first, Google Workspace second) and sector.
Three families of engagement:
- Individuals & families — scam triage, MFA setup, identity recovery, family digital hygiene, lost-device response
- SMB controls uplift — Essential Eight ML1/ML2/ML3, endpoint protection rollout, BEC prevention, backup & ransomware preparedness
- SMB incident & readiness — Notifiable Data Breach response, cyber insurance readiness review
- Fixed-scope, fixed-fee, written-report deliverables
- Australian regulatory anchoring — ACSC, OAIC, ACCC Scamwatch, eSafety
- Sequenced by tenant + sector for predictable delivery
Individuals & families
Scam & phishing triage ("is this real?"). MFA + password manager setup. Identity theft response with IDCARE coordination. Account takeover recovery. Family digital hygiene & child safety review. Lost-device response.
SMB — controls uplift
Essential Eight uplift at ML1 (baseline), ML2 (hardened), or ML3 (advanced). Endpoint protection rollout. Business email compromise prevention. Backup & ransomware preparedness with tabletop exercise.
SMB — incident & readiness
Notifiable Data Breach (NDB) response — scope assessment under the OAIC scheme, eligible-data-breach determination, affected-individual notification drafting, OAIC submission. Cyber insurance readiness review against the policy's stated controls.
Scope it on request
If your situation doesn't match an engagement above, the Cyber doors include 140+ pages targeting specific buyer cohorts, locations, and threats. Browse them to find the closest fit, or contact us to scope an engagement.
Get on the Cyber waitlist
Each engagement has its own waitlist door scoped to your buyer and city. We'll let you know when access opens and what intake looks like.
Browse the doors