Multi-factor authentication
Review supported authentication methods, administrative accounts and access requirements for your staff.
Bring account security, device protection, email defence and recovery planning together. PCFIXIT helps businesses review gaps and agree practical security priorities.
Security is an ongoing responsibility across people and systems. We discuss the controls your business already uses, how alerts are handled and which improvements should come first.
Review supported authentication methods, administrative accounts and access requirements for your staff.
Discuss managed password storage, sharing controls and how access is removed when staff leave.
Review supported cloud account controls and investigate suspicious activity within the agreed monitoring scope.
Restrict unauthorised software on suitable systems and establish an approval process for legitimate applications.
Maintain supported operating systems and applications alongside appropriate endpoint security.
Discuss endpoint detection and managed response options, escalation contacts and who is responsible for acting on alerts.
Review filtering and supported controls designed to reduce malicious messages and impersonation attempts.
Help staff recognise suspicious requests and understand how to report them. Training and testing scope is agreed with your business.
Discuss dark web monitoring for supported business identifiers. Findings require investigation; an alert alone does not establish an active compromise.
The Australian Signals Directorate’s Essential Eight provides a framework for discussing practical controls. Applicability and maturity require assessment against the relevant guidance and your systems.
Installing a set of products does not by itself establish a maturity level or compliance. PCFIXIT can help discuss readiness, identify gaps and prioritise implementation work.
This checklist supports a discussion; it is not a formal security assessment or certification.
Penetration testing and incident investigations require a defined scope, explicit authorisation and appropriate expertise. Contact us to discuss the requirement and whether specialist assistance is needed.
If you suspect an active incident, call PCFIXIT and describe the affected systems. Avoid making assumptions about containment or recovery until the situation has been assessed. For notification obligations, use current OAIC guidance and appropriate professional advice.
Antivirus is one control. Account security, patching, email protection, backups and staff processes also affect your exposure and ability to recover.
The selected plan and service agreement define the controls and monitoring included. We review your requirements before recommending a scope.
A service subscription or installed product does not establish compliance or a maturity level. Any formal assessment must have a defined scope, evidence requirements and appropriate assessor.
No. Security controls reduce risk but cannot eliminate every threat. Monitoring, response planning and recovery remain important.
PCFIXIT is based at Level 1, Suite 4, 25 Township Drive, Burleigh Heads QLD 4220. Office visits are by appointment. View our service areas.
Tell us about your business systems, current protections and the concerns you want to address.