CYBERWHITE Blog
Australian Cybersecurity, Honestly Written
Plain English writing on Essential 8, SMB1001, SOC 2, and the compliance decisions facing Australian businesses. Founder-led, no marketing fluff.
- SMB1001··8 min read
SMB1001 Bronze Checklist: How an Australian SMB Reaches Bronze in 30 Days
A practical SMB1001 Bronze checklist for Australian small businesses: what Bronze covers, the fastest sensible order to do it, the evidence to keep, and a 30-day plan.
By Vikram Kukreja
- Essential 8··9 min read
Essential 8 ML1 Checklist: What an Australian SMB Actually Needs to Pass
A control-by-control essential 8 ml1 checklist for Australian SMBs: exact ACSC patch timeframes, MFA, macros, backups, and the failures that fail audits.
By Vikram Kukreja
- Essential 8··9 min read
Essential 8 MFA Requirements: What Counts, What Doesn't, and Phishing-Resistant MFA
Essential 8 MFA requirements explained by maturity level: which methods satisfy ML1, ML2 and ML3, why SMS is discouraged, and how to enforce phishing-resistant MFA in Microsoft 365.
By Vikram Kukreja
- Essential 8··9 min read
Essential 8 Maturity Levels Explained: ML1 vs ML2 vs ML3 (and Which You Need)
A plain-English guide to the essential 8 maturity levels (ML1, ML2, ML3): what each level mitigates, why they are cumulative, and which one your business needs.
By Vikram Kukreja
- MSP Insights··9 min read
Delivering Essential 8 as an MSP: Turning Compliance into Recurring Revenue
A practical playbook for essential 8 for msps: productise multi-tenant assessment, evidence, and remediation into a recurring managed compliance service.
By Vikram Kukreja
- SMB1001··5 min read
Essential 8 vs SMB1001: Which One Should an Australian SMB Start With?
Honest breakdown of Essential 8 and SMB1001 for Australian SMBs. When to start with Bronze, when to jump to ML1, and how the two standards work together.
By Vikram Kukreja