Long-form writing on Australian MSP practice, ATO compliance, ITIL, cybersecurity, and what we're learning while building the BBN Suite.
The ASD Essential Eight is the closest thing Australia has to a mandatory cybersecurity baseline. This guide covers: what each of the eight controls actually means, what the four maturity levels look like in practice, how to assess posture using evidence from your RMM, and what auditors actually look for in a maturity report.
Read the guide →Phase 2 asks for disaggregated payroll reporting: base salary, overtime, allowances, bonuses, director fees, and salary sacrifice — all tracked separately. This post covers what the ATO expects, where software commonly gets it wrong, and how to audit your own Phase 2 submissions before year-end becomes a reconciliation nightmare.
Read the explainer →Public pricing data and practical guidance for Australian MSPs: per-user rates by region and tier, hourly T&M rates, project pricing, margin benchmarks, and the most common pricing mistakes we see. With working numbers for what a 10-person MSP actually costs to run.
Read the guide →More posts coming. Want a specific topic? Suggest one.
STP Phase 2, BAS, GST, TPAR, super — the ATO-facing reality of running payroll and invoicing in Australia.
Essential Eight, ISO 27001 alignment, practical RMM-driven audit evidence gathering.
Pricing, contracts, billing, margin management, and the numbers that actually determine whether an MSP survives.