№ 01
Your IT is managed, not audited.
Outsourcing to an MSP is sensible. Letting that same MSP be the only party who ever checks its work is the gap — and the gap is what Adeo looks at.
Sector · Any industry
Fixed-fee · In writing
The controls that matter don't change by industry.
Law, accounting and healthcare are where Adeo goes deepest. But a weak admin account, an untested backup, a forgotten way in — these look the same in any business, and so does the evidence that puts them right. If your IT is outsourced and no one independent has ever checked the work, this page is for you.
Measured againstACSC Essential Eight · ISO 27001 · NIST CSF 2.0 · your insurer's control set
Why now
Sector pressure points
Why other businesses come to Adeo.
№ 02
Insurers want evidence now, not assurances.
Cyber-insurance renewals ask for proof: multi-factor coverage, a tested backup, admin rights kept separate. A declined claim doesn't care what industry you're in.
№ 03
Your contracts have started asking.
Enterprise customers, government tenders and supply agreements increasingly want your controls in writing. The security questionnaire is now part of winning the work.
№ 04
Director duty isn't only for regulated firms.
The section 180 duty of care covers cyber posture for the board of any company. "We outsourced it" is not, on its own, a defence.
№ 05
You hold more than you protect.
Client records, financials, designs, pricing, staff details. In most businesses the thing worth stealing is guarded by less than anyone realises.
Engagements
Fixed-fee, in writing, before work begins
How Adeo works with owners.
№ 01 · Entry
Quick-Scan
Scoped to one domain · days, not weeks
№ 02 · Flagship
Baseline Audit
Scoped to the engagement
№ 03 · Ongoing
Technology Advisory
By tier · sized to headcount
Recurring · Artefact
Adeo Pulse
By subscription · monthly
Full engagement details live on the Services page. Every proposal is written in advance; there are no retainers, renewals, or recurring charges without your signature.
First engagement
What the brief typically surfaces
What the engagement is built to find.
On a first engagement with a 20 – 150 staff business, in any industry, the work is designed to surface the kind of defect a self-assessment rarely catches:
- 01A service account or shared admin login with broad reach across core systems, a password years old, and no place in the business's multi-factor, conditional-access or staff-offboarding routine.
- 02A backup that runs on schedule with no restore test ever written down — the single piece of evidence insurers most often ask for at renewal.
- 03Former-staff accounts still live, mailbox rules still forwarding, shared links still open — long after the person, the project or the customer they were for has gone.
- 04A firewall rule or an access exception added for one project or one trip, and never taken away.
What you get is a plain-English document your leadership can act on and forward to your MSP unedited. It is the same engagement a law firm or a clinic receives — only the name of the industry on the front changes.
Independence, plainly
Adeo's only source of revenue is the fee your organisation pays us.
That limits what we can earn. It is also the product. No vendor commissions. No MSP referral fees. No resale margin. In either direction.
What we will not do
- × Run helpdesks, desktop management, or production systems.
- × Resell software, hardware, or licences.
- × Take commissions from any vendor, MSP, or insurer.
- × Brief a board without the engagement sponsor in the room.
Next step
A thirty-minute conversation, at no cost.
Email contact@adeo.au. Reply within one business day.
Start the conversation →