Pulse comes in two forms — Essential for smaller organisations and Premium for larger ones — scoped to your organisation. The fixed monthly fee is set in the written proposal, with no surprises.

Recurring deliverable · Adeo Pulse First business day, every month

The monthly governance document the leadership desk has never had.

On the leadership desk by the first business day of each month: one verdict, scored across five domains — service delivery, commercial discipline, roadmap and governance, security and compliance, and AI adoption and posture. Each one cross-walked to the ACSC Essential Eight, ISO/IEC 27001:2022, NIST CSF 2.0 and CIS Controls (the AI domain read against the NIST AI RMF and ISO/IEC 42001:2023), alongside the control set your insurer will hold you to at renewal.

A principal reads every issue and signs it, and stands behind every finding. Pulse measures what your MSP delivers. It works alongside the MSP, reading the outcome rather than running the systems. Leadership gets an independent monthly record to table at a board meeting, hand to an insurer, or put in front of a regulator without commissioning a fresh assessment each time.

Start a Conversation →

Two ways to subscribe

Essential

Standalone monthly Pulse for smaller organisations. The five-domain scorecard, MSP forward email, glossary, methodology and human sign-off. Also the bundled deliverable on the Lite and Foundation advisory retainers.

Premium

For larger organisations and groups. The full issue with technical appendix and roadmap delta, all integrations, and a quarterly thirty-minute review.

Cadence: Monthly · first business day
Fee: Fixed-fee · set in the written proposal
Setup: One-off · scoped in the written proposal

Pulse is onboarding now; your first monthly issue is scheduled in the written proposal. Larger organisations, groups, or bespoke insurer cross-walks are scoped on request; the fixed monthly fee is always set in the written proposal.

Specimen issue · July 2026

An issue, read end to end.

The full issue as leadership would receive it. Warburton & Field Lawyers, its MSP and the renewing insurer are invented for this specimen — every name, score, evidence reference, date and figure is synthetic — written to show the document’s shape rather than any single client’s result. A live issue is prepared from authenticated reads against your own tenancy.

Issue 07 · July 2026 · Warburton & Field Lawyers Commercial in Confidence p. 01 / 06

The July verdict

Insurer-ready — with conditions.

Against the renewing cyber insurer’s control set, at the January 2027 renewal.

Overall posture · Amber · ↓ 1

Executive line

July’s signal is licence over-assignment in Microsoft 365 and a slipped restore-test cycle; the latter is the single open item the insurer is most likely to surcharge at renewal. Roadmap remains ahead of original commitment, and identity hardening reached 100% MFA on human accounts in the period.

Five-domain score

Service delivery	86	↑ 1
Commercial	71	↓ 3
Roadmap & governance	82	↑ 3
Security & compliance	78	↓ 3
AI adoption & posture	74	↑ 2

Three for your attention

01. Backup restore-test evidence is 113 days overdue. The renewing insurer expects quarterly evidence. If unactioned at the January renewal, the policy is likely to issue with a 7–15% premium loading against the relevant control — A$3,150 to A$6,750 across the year on the current premium. Owner: MSP.
02. Fourteen Microsoft 365 E3 seats are unused — absent from sign-in logs for more than ninety days. About A$630 per month recoverable, A$7,560 across the year. Ownership sits with leadership — the cleanest commercial decision available this quarter.
03. Two privileged service accounts remain without MFA — both predate 2024. A control failure against insurer §3.1 if persistent at renewal. Either retire the accounts or enforce certificate-based authentication. Owner: MSP for execution; Adeo for evidence capture into Issue 08.

This month’s wins

MFA coverage reached 100% of human accounts — the last legacy human identity was retired on 17 July.
Patch compliance moved from 91% to 96% across the estate.
Eight of fourteen Baseline Audit roadmap items are now closed; full closure is forecast for October 2026, six weeks ahead of the original commitment.

Signed off — Adeo, 26 July 2026. Principal · Adeo Partners Pty Ltd. Adeo Partners Pty Ltd · ABN 50 698 595 523

Adeo Pulse · July 2026 Page one · Executive scorecard

Issue 07 · July 2026 · Warburton & Field Lawyers Technical appendix p. 02 / 06

Finding 01 of 03

Severity highWorsened from amber to red113 days overdue

Backup restore-test evidence is overdue.

Each finding carries evidence, framework cross-walk, ownership and a costed impact.

Evidence

The backup platform’s orchestrated job log records the last successful witnessed restore at 2026-01-04 21:14 ACDT; the subsequent quarterly cycle has not been scheduled. Evidence reference WF-BKP-Q1-2026-RST.

Plain-English impact

Without witnessed restore evidence in the period, the insurer’s quarterly evidence requirement is not satisfied. At renewal in January 2027 the policy is likely to issue with conditions or a surcharge against control §4.3.2.

Ownership

MSP for execution. Adeo for evidence capture into Issue 08.

Remediation

Schedule a restore test for the week commencing 3 August. Witness the session with a recorded artefact; lodge the artefact reference for inclusion in Issue 08.

Cost of inaction

The insurer’s current loading guidance is 7–15% premium loading for non-compliance with restore evidence — A$3,150 to A$6,750 across the year on the current premium. Adeo does not underwrite or bind insurance; the figures are indicative and for your broker to confirm.

Month-on-month

Worsened from amber (Issue 06) to red (Issue 07). The restore window is now 113 days past the insurer’s ninety-day expectation.

Framework cross-walk

ACSC Essential Eight: Regular backups — restoration testing required.
ISO/IEC 27001:2022: A.5.30 — ICT readiness for business continuity. A.8.13 — Information backup.
NIST CSF 2.0: RC.RP-04 (Recovery plan execution) and PR.DS-11 (Backups maintained).
Insurance policy: §4.3.2 — quarterly witnessed restore validation.

Findings 02 (Microsoft 365 E3 over-assignment) and 03 (privileged service-account MFA) follow this same evidence pattern in the full issue.

Adeo Pulse · July 2026 Page 2 of 6 · Technical appendix

Issue 07 · July 2026 · Warburton & Field Lawyers Forward without edit p. 03 / 06

For your MSP

A pre-written email to your account manager.

Your monthly job becomes hit forward.

To: account-manager@msp.example
Cc: Adeo
From: James Warburton, Managing Partner
Subject: Pulse 07 — three items flagged for action by 1 August

Hi [account manager],

Adeo’s monthly Pulse for Warburton & Field, July 2026, has flagged three items where action is requested from your side. Evidence references in the attached PDF; brief summaries below.

Backup restore-test evidence overdue. The last witnessed restore was 4 January. The renewing cyber insurer expects quarterly evidence and we are now 203 days past the last test — 113 days beyond its ninety-day expectation. Can you schedule a restore test for the week commencing 3 August, with a witnessed session captured for inclusion in next month’s Pulse? Evidence reference WF-BKP-Q1-2026-RST.
Two privileged accounts without MFA. Service accounts svc-app-warburton and svc-mgmt-warburton — both long-standing legacy. Can either be retired, or MFA enforced via certificate-based authentication, by 21 August? Evidence reference WF-IDM-PRIV-2026-07.
External sharing up 31% in the period. Recognised as the matter-management rollout. Can you forward the SharePoint external-sharing log so Pulse can confirm the increase is bounded to the rollout and not unrelated drift? Evidence reference WF-SP-EXT-2026-07.

A response by 1 August would help close these items in next month’s Pulse. Happy to discuss any of these on a fifteen-minute call.

Thanks,
James — Warburton & Field Lawyers
cc’d: Adeo — oversight

Written to be pasted into Outlook word for word. Adeo does not send it — the relationship with your MSP stays direct, and Adeo is cc’d so the response is captured into next month’s Pulse. The email carries the MSP-actionable items only; the licensing decision on page 1 sits with leadership.

Adeo Pulse · July 2026 Page 3 of 6 · For your MSP

Issue 07 · July 2026 · Warburton & Field Lawyers Roadmap delta p. 04 / 06

Baseline Audit roadmap

57% closed at eight months in.

Delivered 1 November 2025. Forecast full closure 31 October 2026 — six weeks ahead of the original December 2026 commitment.

Total items

Closed

In progress

Open

Closed on or ahead of target

Conditional access ruleset hardening14 Jul
Entra sign-in log export automation22 Jun
Defender for Endpoint estate coverage09 Jul
Guest account quarterly review03 Mar
Safe Links & Safe Attachments enforcement27 Feb
Privileged Identity Management rollout11 Feb
Breached-credential monitoring on-domain22 Jan
Documentation currency audit14 Jan

In progress checkpoint dates set

Windows 11 migration · six endpoints remainingTgt 20 Aug
Backup immutability enforcementTgt 30 Aug
Matter-management external sharing reviewTgt 23 Aug
Insurer control cross-walk · 2027 cycleTgt 31 Oct

Open MFA enforcement also flagged on page 1

Privileged service-account MFA enforcement87 d open
Disaster-recovery tabletop exercise118 d open

Adeo Pulse · July 2026 Page 4 of 6 · Roadmap delta

Issue 07 · July 2026 · Warburton & Field Lawyers Glossary p. 05 / 06

Plain English

For when this document is forwarded.

This issue gets forwarded — to the CFO, the board, the insurer. This page is here so the language in it holds up wherever it lands.

MFA coverage: The percentage of accounts with multi-factor authentication enforced. Insurer expectation: 100% of privileged identities; 95% or higher across all human accounts. Pulse counts enforced coverage only, because a registered-but-not-enforced control fails at audit.
Conditional Access drift: When the rules controlling who can sign in — from where, on what device — change without a documented approval. Drift is a governance risk: access can widen without leadership ever approving it.
Immutable backup: A backup that cannot be deleted or altered for a defined retention period, even by an administrator. The defence against ransomware that encrypts the backups along with the production data.
Restore-test evidence: Witnessed proof that backups can actually be restored within the agreed window. An untested backup is unproven, and insurers require quarterly evidence.
Insurer §: The specific clause in your cyber-insurance policy that maps to a Pulse finding. Cited so the evidence trail is in place if a claim is ever questioned.
Pulse delta: The month-on-month change in posture. Resolved means closed since last issue; New red means newly flagged this month; Worsened means the score moved down vs. the prior period.

Adeo Pulse · July 2026 Page 5 of 6 · Glossary

Issue 07 · July 2026 · Warburton & Field Lawyers Methodology & sign-off p. 06 / 06

Methodology

How this document is made.

Data collection

Read-only, authenticated access to your own systems, and only your own systems. No third-party agents are installed on your endpoints, and no telemetry leaves your environment for ours. Evidence is held on encrypted, access-controlled infrastructure in Australia, kept separate from every other system we run, with strict per-client separation. The particular tools and sources behind each reading are set out for you under engagement, rather than on a public page.

Review & sign-off

Every Pulse issue is read front to back by a principal before release and signed off in their name. The executive line on page 1 is written by hand; the MSP forward email on page 3 is written to be pasted and sent verbatim. A principal stands behind every finding.

Cadence & archive

First business day of each month. Every issue is kept as a durable, secure record your board or insurer can draw on — past issues, trend lines, findings and MSP forward emails all retained, so the evidence travels cleanly without you maintaining the archive.

Signed off, Adeo

26 July 2026

Principal

Adeo Partners Pty Ltd

ABN 50 698 595 523

Issue 07 of an ongoing monthly series prepared for Warburton & Field Lawyers. Commercial in Confidence.

Adeo Pulse · July 2026 Page 6 of 6 · End of issue

Service delivery

Is service delivery meeting the contract?

SLA compliance against contracted P1/P2/P3 terms; ticket reopen rate; MTTR for P1 incidents; recurring-issue clusters; cross-check against your MSP’s own monthly report. Where ticket data isn’t made available, Pulse notes the visibility gap, since a measure you cannot see is one a board cannot rely on.

Commercial

Is your spend efficient?

Microsoft 365 / Entra licence utilisation — unused seats, wrong-tier assignments. Invoice accuracy review against contract and consumption. Contract drift watch. Quarterly third-party markup sanity-check against published vendor pricing. Cost-of-inaction annotated on every commercial finding.

Roadmap & governance

Is the work agreed actually getting done?

Baseline Audit roadmap closure rate by item, age and owner. Change-register hygiene. Documentation currency — could your operation survive a change of provider? Progression against the quarterly commitments your MSP made.

Security & compliance

Are the controls your insurer expects in place, every month?

Identity (MFA, privileged role count, Conditional Access drift, guests). Endpoints (Intune/Defender enrolment, patch compliance, EDR). Email (Safe Links, sharing, anomalous mail rules). Backups (last success, restore-test, immutability). External exposure, breached credentials, lookalike domains. Cyber-insurance control-set cross-walk.

AI adoption & posture

Is the AI your team is using defensible to your regulator and your insurer?

AI tool inventory across the firm — sanctioned tooling, shadow usage, and the AI features embedded inside the software your team already pays for. Sector-aligned to AHPRA principles (healthcare), state Law Society guidance (legal), and APES 110 plus ATO modernisation expectations (accounting). Surfaces approval-workflow gaps, supervision-SOP absences, and renewal-questionnaire weak points.

Pulse is monthly, point-in-time oversight. Real-time alerting and operational response stay with the MSP; Pulse measures whether the outcome held.

Does Pulse replace our MSP?

No. Pulse measures what your MSP delivers across five domains and hands you evidence suitable for board review each month. Real-time alerting and operational response stay with the MSP; Pulse is read-only and never operates the systems it scores. It is built so the MSP stays exactly where it is — the monthly scorecard keeps the relationship accountable, with both sides working from the same independent read.

How is Pulse priced?

Pulse comes in two forms — Essential for smaller organisations and Premium for larger ones. Groups, multi-entity structures and bespoke insurer cross-walks are scoped on request. The fixed monthly fee is set in the written proposal, with no surprises.

Do we need a Baseline Audit before starting Pulse?

With an MSP and a Baseline Audit already in place, Pulse is onboarding now, and your first monthly issue is scheduled in the written proposal. Where a baseline is missing, Adeo will say so and recommend the narrower engagement first rather than score you against a position no one has established.

Next step

A thirty-minute conversation, before any commitment.

At no cost and with no obligation: a half-hour read on whether Pulse fits your situation, and an honest answer if it does not. Pulse is onboarding now; with an MSP and a Baseline Audit already in place, the written proposal sets the month your first issue arrives. Where the baseline is missing, Adeo will say so and point you at the narrower engagement first.

Send your most recent MSP monthly report and your current cyber-insurance renewal questionnaire with the first email, and the first reply will already have something to say. A reply follows within one business day.