CertIQ
How it works Solutions Learn FAQs
Check my score
Login

CertIQ Learn

Practical cyber security guides for Australian businesses.

Aligned with the ASD Essential Eight, written for people who run businesses — not security teams. Scan your domain to see which of these apply to you, with personalised findings.

Run a scan

Quick answers: What is the Essential Eight? · Do I need cyber insurance? · How much does cyber insurance cost in Australia? · A customer sent me a cyber security questionnaire. Where do I start? · Can someone send email pretending to be my business?

Essential Eight guides
Essential Eight guide G1 · 10 points toward CertIQ Ready
Multi-factor authentication: the 10-point fix to make first
MFA is the highest-value action available. This guide explains what to enable, how to enforce it, and what "enforced for all staff" actually means in practice.
Guide 8 min read
Essential Eight guide G2 · 8 points toward CertIQ Ready
How to separate admin accounts from daily use — and why it matters
If your IT staff use admin accounts for email and browsing, a single phishing click gives attackers full system control. Here is how to fix it.
Guide 7 min read
Essential Eight guide G3 · 8 points toward CertIQ Ready
Patching: why 48 hours matters and how to make it achievable
One of the most common attack entry points is an unpatched vulnerability. This guide explains what the ASD requires and how to build an achievable patching process.
Guide 7 min read
Essential Eight guide G4 · 8 points toward CertIQ Ready
The right way to back up your business — tested, offline and recoverable
A backup you have never restored from is a backup you can't count on. This guide explains what the ASD requires and how to know your backups will actually work when needed.
Guide 9 min read
Articles
Article · Email security · Linked to scan findings
What is DMARC — and why does your domain probably not have it?
Without DMARC enforcement, anyone can send email that appears to come from your domain. This is how many business email compromise attacks begin.
Article 6 min read
Article · Open ports · Linked to scan findings
RDP exposed: why an open Remote Desktop port is the breach waiting to happen
Port 3389 is one of the most exploited entry points for ransomware. If your scan flagged it, read this today.
Article 6 min read