Cyber Security Awareness Month 2026: A Recap of Our Webinar Series

What should we fix first? How would an attacker find a way in? And which cyber framework actually fits our organisation?

This Cyber Security Awareness Month, we were thrilled to team up with three of our partners, Coastal Cyber, Volkis and Apollo Secure, to tackle those questions head on.

Below, we revisit each session, the questions it explored and what those ideas mean for your organisation. You’ll also find links to the recordings, so you can catch up on a session you missed or take another look at a topic that matters to your team.

Coastal Cyber -Stop Guessing What to Fix First: The Five-Domain Cyber Security Plan

When time and resources are limited, deciding what to fix first can be harder than spotting what needs work.

Our Coastal Cyber session focused on that challenge with Daniel Johns (DJ), founder of Coastal Cyber. Using SMB1001, the Australian-developed cyber security standard designed for small and medium organisations, the session explored how five domains bring structure to a working security program.

The focus was practical: choosing an appropriate maturity tier, deciding what needs attention next and understanding what your team can manage internally versus where specialist support may help.

Watch the webinar on YouTube: https://www.youtube.com/watch?v=U5Q67tiYq40

Volkis -Through a Hacker’s Eyes: How Attackers Find a Way In and How You Can Stop Them

A weakness that looks minor on its own can matter much more when you see it through an attacker’s eyes.

With Alexei Doudkine, Co-Founder and Offensive Director at Volkis, we explored how attack paths develop across technology, identity and process. The session brought an offensive security perspective to prioritising findings, looking beyond individual gaps to consider exploitability and business impact.

For defenders, that means focusing remediation on the weaknesses that could help an attacker progress, and identifying where to interrupt that path.

Watch the webinar on YouTube: https://www.youtube.com/watch?v=cpigyvo2yoU

Apollo Secure -Avoid the Cyber Framework Decision NIGHTMARE. Come Learn How to Thread the Needle

Essential Eight (and its successor, ASD Essentials), ISO 27001, NIST and SMB1001 each have a role, but choosing what fits takes more than comparing names.

Our session with Damien Cantelo, CEO and Founder of Apollo Secure, explored how organisations can navigate overlapping frameworks alongside board expectations, insurer requirements and regulatory obligations.

The focus was on connecting requirements to clear controls, ownership, evidence and improvement activities, without duplicating work. Rather than adopting another framework for its own sake, the aim was to understand what fits your risks, obligations and maturity.

Watch the webinar on YouTube: https://www.youtube.com/watch?v=lVzqouz7nwk

Keeping the conversation going

Across the series, we approached cyber security from three connected angles: setting priorities, understanding attack paths and making frameworks work in practice.

Thank you to DJ, Alexei and Damien, our partner teams, and everyone who joined us.

Good cyber security takes consistent effort throughout the year. If these sessions prompted a closer look at your priorities, defences or framework requirements, Secure ISS can help you turn those questions into a practical plan. Let’s work out your next step.