Prove you did
the right thing.
When a regulator, insurer, or board asks "what did you do to prevent this?" you need an answer with evidence. We help you build it before anyone asks.
The outcome
Your evidence portfolio
After completing our preparation program, you will have documented evidence of exercises, training records, and assessment reports. The evidence your regulator or insurer expects to see when they ask about reasonable steps.
Exercise records
Documented tabletop exercises showing your leadership team has practised responding to realistic scenarios.
Assessment reports
Independent expert assessments of your security standing against relevant standards and regulatory expectations.
Training evidence
Records of staff training, awareness sessions, and competency development in cyber resilience.
Compliance documentation
For healthcare: Privacy Act, APP 11, My Health Records Act. For professional services: client confidentiality obligations. Documented and ready for review.
Assessments and training
Build your evidence
Tabletop exercises
Facilitated scenario-based exercises for your leadership team. Test your response plan before you need it. A common starting point for organisations building their evidence portfolio.
Executive roundtables
Your leadership team works through a real breach scenario with our facilitators. Guided conversation for 10 to 15 leaders.
Workshops for your IT team
Hands-on training for up to 30 participants. Practical skills your technical team can apply immediately.
Training courses
Cyber resilience, governance, and incident response courses. Matt wrote the curriculum for the Australian Defence Force Academy and co-writes courses at UNSW Business School.
What to expect
A typical preparation program
Initial assessment
We assess your current position, identify gaps, and recommend the right mix of exercises and training for your situation.
Exercises and training
We deliver the program over weeks or months depending on your team's availability. Each session produces documented evidence.
Evidence portfolio
You receive a portfolio of exercise records, assessment reports, and training evidence. Ready for your regulator, insurer, or board.
Start with a tabletop exercise
It takes half a day and immediately produces evidence for your portfolio.
Ready for ongoing protection? See the NDF Protection Program. Dealing with an incident right now? Get help now.