Code Zero
IT consulting · Cyber security · Governance · Perth WA

Start at zero. Know where you stand.

Code Zero gives directors and business owners an honest baseline of their cyber risk, a prioritised plan to reduce it, and the governance to prove it is working.

01

What we do

Three practices, one accountable adviser. Engage us for a single assessment or as your ongoing security and governance lead.

Practice A

Cyber security

Find the gaps that matter and close them in the right order.

  • Essential Eight maturity assessment and uplift
  • SMB1001 certification readiness
  • Microsoft 365 security review and hardening
  • Cyber insurance readiness
  • Incident response planning and tabletop exercises
Practice B

Governance and risk

Give the board evidence, ownership and a paper trail.

  • Virtual CISO and security leadership
  • Board and executive cyber risk reporting
  • Policy suite and IT governance framework
  • Risk register and control ownership
  • Supplier and third-party risk reviews
Practice C

IT consulting

Technology decisions made on your side of the table.

  • IT strategy and three-year roadmap
  • IT provider reviews and tender support
  • Cloud and Microsoft 365 migration planning
  • Merger, acquisition and integration IT due diligence
  • Budget and licensing reviews
02

How we work

Every engagement starts at step zero: an evidence-based baseline. No uplift plan is worth funding until you know your starting point.

Baseline

We assess your environment against a recognised framework and record what is in place, with evidence.

Prioritise

Gaps are ranked by risk, cost and effort so your budget goes to the controls that reduce the most exposure.

Uplift

We work with your internal team or IT provider to implement the plan, and verify each control once it is done.

Govern

Quarterly reporting, policy reviews and a living risk register keep the board informed and the gains in place.

03

Frameworks and sectors

We work to the standards your insurer, regulator and customers already ask about.

Frameworks we assess against

Essential Eight
The Australian Signals Directorate's eight mitigation strategies, measured from Maturity Level 0 to 3.
SMB1001
A tiered cyber security certification for small and medium businesses, from Bronze to Diamond.
ISO/IEC 27001
The international standard for an information security management system.
NIST CSF 2.0
A risk-based framework organised around govern, identify, protect, detect, respond and recover.
Privacy Act 1988
Including obligations under the Notifiable Data Breaches scheme.

Sectors we know

Financial services
AFSL holders that need to evidence technology and cyber risk management.
Healthcare
Medical and allied health practices handling sensitive patient information.
Not-for-profits and clubs
Boards and committees with real obligations and lean budgets.
Mining and industrial
Operators and suppliers facing customer security questionnaires.
Professional services
Firms whose clients trust them with confidential data.
04

About Code Zero

Code Zero is a Perth consultancy for organisations that need senior cyber security and governance advice without hiring a full-time security executive.

The practice is led by a technology director who founded and ran a Perth managed IT provider from 2012, with hands-on experience across managed services, Microsoft 365, cloud migrations and compliance for regulated sectors.

That background matters. Advice is written by someone who has operated the controls being recommended, knows what they cost to run, and can tell your IT provider exactly what needs to change.

BasedPerth, Western Australia
In the industry since2012
EngagementsFixed-scope assessments or monthly retainer
Works alongsideYour internal IT team or existing provider
05

Common questions

We already have an IT provider. Why would we need you?

Your provider runs your systems. We check the controls, report to your board and set priorities. Keeping those roles separate means nobody is marking their own homework, and most providers welcome a clear plan to work to.

What does an Essential Eight assessment involve?

We review configuration, interview the people who run your systems and collect evidence for each of the eight strategies. You receive a maturity rating per strategy, the specific gaps to your target level and a costed, prioritised roadmap.

What is a virtual CISO?

A senior security lead engaged part-time. You get strategy, risk reporting, policy ownership and someone accountable in the room at board and audit meetings, for a fraction of the cost of a full-time executive.

Can you help with a cyber insurance application or renewal?

Yes. We review the insurer's questionnaire against what is really in place, close the gaps that affect cover and help you answer accurately. An incorrect answer on a proposal form can put a claim at risk.

Do you work outside Perth?

Yes. Most assessment and governance work can be delivered remotely, with on-site visits across Western Australia where they add value.

06

Talk to us

Tell us what is prompting the conversation: an insurance renewal, a board question, a customer questionnaire or an incident. The first 30 minutes are free and you will leave with a clear next step.

Prefer email? [email protected]

This opens a pre-filled email in your mail app. Nothing is stored on this site.