More likely than most owners realise. Australian Signals Directorate (ASD/ACSC) reports a cybercrime every 6 minutes, with the average small business incident costing $56,600 and rising 14% year on year. Sophos research shows 47% of businesses under $10M turnover have been hit by ransomware. It’s not a question of if, it’s when — and what shape your business is in when it happens.
Most small business owners think they’re below the threshold attackers care about. They’re not. Attackers don’t pick targets manually — they run automated tools that hit thousands of businesses simultaneously, and small businesses without proper defences are the easier targets. The headlines you see (Optus, Medibank) are the big ones; the SMBs going down quietly every week don’t make the news.
(see above)
Our Cyber Security service is built around the SMB1001 framework — a structured, certifiable cyber posture you can achieve in 60-90 days at the Bronze level. Plus our SMB1001 Cyber Essentials training course for the human layer, where most attacks actually start.
Sources: ASD/ACSC Annual Cyber Threat Report 2024-25; Sophos State of Ransomware 2024.
Want to talk through this in your specific business context? The first 30 minutes is free — phone or Microsoft Teams. Book a free 30-min scoping call →
