--- title: "Cyber Security and IT for Financial Advisers in Perth | CCP" description: "Cyber security and IT for Perth financial advisers and planners: licensee cyber questionnaires, email-compromise protection and evidence, done locally." url: "https://ccp.com.au/industries/financial-advisers/" --- # Cyber security for financial advisers in Perth ## Controls your licensee will sign off on, and the evidence behind them. The Australian Securities and Investments Commission (ASIC) expects advice businesses to manage cyber risk. Licensees now pass those expectations down to every practice. We set up, maintain and evidence the cyber security controls from Perth, with engineers you can call. - Licensee cyber questionnaires completed with evidence attached - Protection against email compromise and payment redirection - Secure access to planning software, platforms and client portals - **40+ Google reviews** - Perth clients since 2000 - Zero offshoring We hold ISO/IEC 27001:2022 certification from BSI, [certificate IS 840964](https://www.bsigroup.com/en-AU/products-and-services/assessment-and-certification/validation-and-verification/client-directory-certificate/IS%20840964/). ## AFSL cyber security requirements for advisers ### Cyber risk is now a licensing obligation. In 2022 the Federal Court ruled in ASIC v RI Advice. An Australian Financial Services (AFS) licensee had breached its obligations by failing to manage cyber risk across its authorised representatives. Licensee scrutiny of practice IT has grown since. - #### Payment redirection A compromised mailbox lets an attacker send “updated bank details” that look like they came from you. We lock down email and set up verification steps that stop it. - #### Client data exposure Fact finds, ID documents, tax file numbers and super details. A breach can trigger Notifiable Data Breaches (NDB) reporting, and it will cost client trust. - #### Audit without evidence “Yes, we have multi-factor authentication (MFA)” isn’t enough when a licensee or insurer asks for proof. We keep the evidence current, so questionnaires take minutes, not weeks. ## ASIC cyber resilience self-check for advice practices ### Could you answer your licensee today? Six questions that come up in most licensee and cyber insurance reviews. Your answers stay on this page. Ready 0 / 6 Answer the questions to see where you stand. 1. Is MFA enforced on email, planning software and every platform login? The most common way in for attackers is a reused or phished password. Yes Not sure No 2. Could you show evidence that devices are encrypted and patched? Licensees increasingly ask for proof, not a yes or no. Yes Not sure No 3. Do staff verify bank-detail changes by phone before acting? Payment redirection is the costliest scam for advice practices. Yes Not sure No 4. Are Microsoft 365 and client files backed up, and has a restore been tested? Microsoft does not back up your data for you by default. Yes Not sure No 5. Is there a written incident response plan, including NDB reporting? Work it out before a breach, not after. Yes Not sure No 6. Is access removed the same day an adviser or staff member leaves? Former staff accounts are a quiet, common risk. Yes Not sure No ## What’s included in IT support for financial planners ### Everything an advice practice needs, from one Perth team. ![A quiet client meeting room in a financial advice practice, with a laptop and tablet on a round table.](https://ccp.com.au/_astro/feature.BEUS-5fn_1FsTX6.webp) - #### Helpdesk & device management Unlimited support for advisers and staff. Laptops encrypted, patched and wipeable if lost. - #### Identity & access MFA across Microsoft 365, planning software and platforms. Access removed the day someone leaves. - #### Email security Filtering, impersonation protection and SPF, DKIM and DMARC records, so nobody can send email that passes as yours. - #### Backup & recovery Microsoft 365, file and document-store backups, restore-tested on a schedule. - #### Staff awareness training Short, regular phishing simulations and training, with completion records for your licensee. - #### Policies & evidence pack Cyber policy, incident response plan and a current evidence pack for licensee and insurer reviews. ## Client reviews of our IT and cyber security support ### Trusted by Perth professionals and the people they refer. Many of our clients come to us through their accountant, adviser or lawyer. That only happens when the work holds up. [Read more client reviews](https://ccp.com.au/reviews/) > “I have used them for many years and have referred them to many of our clients. They are professional, super knowledgeable and proactively make sure that the IT side of my business always works.” **Rueben Taylor** · Google review > “Thanks Lee for your regular updates, particularly regarding viruses, malware and cyber security!” **Linda Grant** · Google review ## Financial adviser cyber security FAQs ### What practice principals ask us. Something not covered? Call [(08) 9467 2269](tel:+61894672269) and ask an engineer directly. ### Our licensee sent a cyber questionnaire. Can you complete it? Yes. We answer the technical sections and attach the evidence. Where you can’t yet say yes, we flag it and tell you what it takes to fix. ### Do you support our planning and platform software? We look after the devices, accounts and access around them: MFA, browsers and Microsoft 365 integrations. When something breaks, we work directly with the vendor. ### Who has access to our systems? Your helpdesk, engineering and admin accounts stay with CCP staff in Perth. For 24/7 threat detection and containment we partner with a specialist security operations centre. We document all of this for your licensee and your privacy policy. ### We’re a small practice. Is managed IT worth it? Licensee expectations don’t scale down with headcount. Pricing is per user, so a small practice pays for a small practice. If a lighter option suits you better, we’ll tell you. Our minimum is 10 seats.