IT & cyber security consulting · Australia
Independent IT and cyber security consulting for Australian organisations: security assessments, cloud and identity, infrastructure and automation, and advisory. Findings you can hand to a customer or an auditor.
What to expect
A written scope, rules of engagement and agreed deliverables before any work starts.
Every finding comes with evidence, a severity and a concrete fix, mapped to the frameworks your auditors recognise.
Minimal collection, never your customers' records, and raw evidence deleted within 30 days of the final retest report.
Services
Networks, identity, operating systems, data flows. Applied across whatever the environment happens to be.
Core
Scoped, authorised testing of your external attack surface, applications and APIs. Findings reported with evidence, severity and a fix, mapped to the frameworks your customers and auditors recognise, with an attestation letter you can share.
Tenant hardening, identity and conditional access, device management and cloud architecture that is secure by default rather than by exception.
Networks, remote access and on-premises systems designed with no exposure you did not choose, and the automation and internal tooling that removes the manual steps where errors live.
Essential Eight maturity assessment and uplift, and fractional IT and security leadership: roadmap, budget, vendor and risk decisions, made with the experience of carrying CIO and CISO responsibilities.
How we work
Every conclusion is reviewed by the consultant before it is reported.
A written statement of work, the asset list, rules of engagement and a signed authorisation to test before anything starts.
If a path reaches your customers' production data, it stops, nothing further is read, and you hear about it immediately.
Findings with evidence, severity and a concrete fix. Secrets masked, personal information redacted, delivered through an encrypted link.
Fixes verified. Credentials removed, allow-lists cleared, raw data deleted, with written confirmation on request. Your findings are never reused, and never published or disclosed without your written consent.
The practice
11+years in IT, grounded in networking and security
Humsick Consulting brings over eleven years of IT experience: managed-services delivery for government and mining clients under heavy compliance and security obligations, then leading IT and security for a mid-sized international business, carrying CIO and CISO responsibilities while continuing hands-on work at enterprise-architect and principal-engineer level.
Rather than one product or layer, the work starts from fundamentals, which is what makes the testing credible: the testers understand how systems are built and run, not only how to attack them. Three constants: security built in from the start, automation where it removes manual error, and systems kept simple enough to stay robust.
Describe the environment and what you need to know about it. You will get a plain answer on whether and how it should be tested.
Client data is handled under the Humsick Privacy Policy and the engagement Data Handling Policy named in every statement of work.