Generated by Rank Math SEO, this is an llms.txt file designed to help LLMs better understand and index this website. # Otto IT: Otto is onto IT. We help you with all the technical things that help your business grow. We’re your new IT and cybersecurity department, servicing both metropolitan and regional areas nationally. Our clients aren’t just clients: they’re partners. Sometimes they call us when systems aren’t working, or there’s a funny light blinking on the modem. Other times we help them transform their business, protect data, and overhaul existing tech. Heads in the Cloud, feet on the ground. That’s Otto. People First, Business Focused, Redefining the Industry... We Humanise Technology. That’s Otto. ## Sitemaps [XML Sitemap](https://www.ottoit.com.au/sitemap_index.xml): Includes all crawlable and indexable pages. ## Posts - [Protect Excel Spreadsheet with a Password](https://www.ottoit.com.au/blog/protect-excel-spreadsheet-password/): Learn how to protect an Excel spreadsheet with a password in three ways: file-level, sheet, and workbook structure. Step-by-step guide for Australian businesses. - [What Is Managed Cybersecurity and Does Your Australian Business Actually Need It?](https://www.ottoit.com.au/blog/what-is-managed-cybersecurity-do-you-need-it/): Australian businesses are actively targeted by cyber threats that used to be an enterprise problem. Here is what managed cybersecurity actually includes and whether your business needs it. - [What Is Ransomware and How Do You Protect Your Australian Business Against It?](https://www.ottoit.com.au/blog/ransomware-protection-australia-business/): Ransomware is malicious software that encrypts your business files and demands a ransom payment in exchange for the decryption key. You cannot open your documents, access your systems, or serve your customers until you either pay the attackers or restore from backups. It is one of the most disruptive cyber threats facing Australian businesses today, and it does not discriminate by size or industry. - [Co-Author Documents Microsoft 365: Stop the Version Chaos](https://www.ottoit.com.au/blog/co-author-documents-microsoft-365/): Co-authoring in Microsoft 365 lets your whole team edit Word, Excel and PowerPoint files simultaneously in real time. Here is how to set it up, stay in control, and leave the email-attachment chaos behind. - [How to Use AI to Transcribe and Summarise Meetings in Microsoft Teams](https://www.ottoit.com.au/blog/ai-transcribe-summarise-teams-meetings/): Yes, Microsoft Teams can use AI to transcribe and summarise your meetings automatically. If your organisation is on Microsoft 365 Business Standard or above, you can enable live transcription right now. Add a Microsoft 365 Copilot licence and Teams will generate an AI meeting summary that includes key points, action items, and decisions, all without anyone lifting a pen. - [Microsoft Teams Channels: How to Use Them Properly](https://www.ottoit.com.au/blog/how-to-use-teams-channels/): Learn how to structure Microsoft Teams channels properly, avoid common mistakes, and keep your workspace clean. Practical tips for Australian businesses using Microsoft 365. - [How Much Does a Cyber Attack Actually Cost an Australian Business? (Breach Impact Guide)](https://www.ottoit.com.au/blog/cyber-attack-cost-australian-business/): A cyber attack on an Australian small business costs, on average, $49,600 per reported incident according to the ACSC Annual Cyber Threat Report 2023-24. For a Business Email Compromise with confirmed financial loss, that figure climbs to $55,000. And for ransomware, the attack that shuts everything down, you are looking at three to four weeks of downtime before normal operations resume. If you have been wondering what a cyber attack actually costs, this post gives you the honest numbers: direct, indirect, and the ones nobody warns you about. - [AI Agents in the Australian Workplace: A Deployment Readiness Checklist](https://www.ottoit.com.au/blog/ai-agents-workplace-australia-business/): AI agents don'\''t just answer questions — they take action. Here'\''s what Australian businesses need to assess before deploying Copilot Agents or any agentic AI in their workplace. - [Recover Deleted File in SharePoint or OneDrive](https://www.ottoit.com.au/blog/recover-deleted-file-sharepoint-onedrive/): Learn how to recover deleted files in SharePoint and OneDrive. Step-by-step guide covering Recycle Bin recovery, Version History, and when to involve IT. - [IT Due Diligence When Acquiring a Business in Australia: What to Check Before You Sign](https://www.ottoit.com.au/blog/it-due-diligence-business-acquisition/): Business acquisitions in Australia fail or underperform for a lot of reasons, and IT is near the top of the list of overlooked risk areas. Financial due diligence gets done properly. Legal due diligence gets done properly. HR, property, and environmental are typically reviewed. Then the technology environment of the acquired business either gets a cursory glance or is skipped entirely on the assumption that "the IT will sort itself out" after settlement. - [Phishing Simulation in Australia: Why Staff Training Alone Is Not Enough to Stop Attacks](https://www.ottoit.com.au/blog/phishing-simulation-staff-training/): Ask most business owners in Melbourne whether their staff know how to spot a phishing email, and the answer is almost always yes. Run a real phishing simulation against their organisation, and the results tell a very different story. The gap between what people believe about their security awareness and what actually happens when a convincing phishing email lands in their inbox is one of the most consistent and costly disconnects in Australian business security. - [Top 10 Cybersecurity Mistakes Australian Employees Make (And How to Fix Them)](https://www.ottoit.com.au/blog/cybersecurity-mistakes-employees-australia/): Most cybersecurity incidents in Australian businesses involve a human element. Not because staff are careless or unintelligent, but because attackers are sophisticated, phishing emails look legitimate, and the consequences of clicking the wrong link are not always obvious in the moment. - [IT Support for Not-for-Profits in Melbourne: Making Technology Budgets Go Further](https://www.ottoit.com.au/blog/it-support-not-for-profits-melbourne/): Running IT for a not-for-profit organisation in Melbourne is a different challenge to running IT for a commercial business. The stakes are just as high and often higher, but the budget is typically a fraction of what a for-profit operation would allocate. Staff are sometimes a mix of paid employees and volunteers with widely varying technical ability. Systems are often older than they should be. And every dollar spent on IT is a dollar not spent on the mission. - [How to Create a Secure Password Policy for Your Business](https://www.ottoit.com.au/blog/secure-password-policy-business/): Weak or reused passwords remain one of the most common causes of business data breaches in Australia. Despite how straightforward the fix sounds, most small and mid-sized businesses still do not have a formal password policy in place. This guide explains what a good password policy covers and how to implement one without making your team's lives unnecessarily difficult. - [Laptop Leasing vs Buying for Business in Australia: The Real Cost Comparison](https://www.ottoit.com.au/blog/laptop-leasing-vs-buying-business/): Every growing business in Australia eventually faces the same hardware headache. You need more laptops, your current fleet is ageing, and someone in finance is asking whether you should buy or lease. It sounds like a straightforward question. In practice, most businesses get it wrong because they only look at the upfront price tag and nothing else. - [How to Run an Effective Remote Team with Microsoft 365](https://www.ottoit.com.au/blog/remote-team-microsoft-365-guide/): Running a remote or hybrid team effectively requires more than just giving everyone a laptop and a video call tool. The businesses that make remote work successful have intentional processes, clear communication norms, and the right tools configured to support how their team actually works. - [What Is Azure Virtual Desktop and Is It Right for Your Business?](https://www.ottoit.com.au/blog/azure-virtual-desktop-business-guide/): Remote work and hybrid work have changed how businesses think about providing employees with access to applications and data. Azure Virtual Desktop (AVD) is one solution that has grown in popularity among Australian businesses looking for a secure, centrally managed way to deliver desktops and applications to staff regardless of where they are working. - [How to Use Microsoft Teams for Project Management](https://www.ottoit.com.au/blog/microsoft-teams-project-management/): Microsoft Teams is primarily thought of as a communication tool, but it is also a capable platform for managing projects. With its integration into Microsoft 365, Teams connects conversations, tasks, files, and meetings in one place, making it a practical choice for businesses that want to manage work without adding another separate tool to their stack. - [Privacy Act Compliance for Australian Businesses: What Your IT Setup Actually Needs to Have](https://www.ottoit.com.au/blog/privacy-act-compliance-it-setup/): Most Australian businesses treat Privacy Act compliance as something for the lawyers to sort out. They get a privacy policy drafted, put it on their website, and consider the job done. That approach misses the point entirely. The Privacy Act 1988, and specifically the Australian Privacy Principles that sit underneath it, places obligations on how personal information is collected, stored, accessed, and protected. Every single one of those obligations has a direct technical component that lives inside your IT systems. - [How to Secure Your Business Smartphone Against Viruses and Malware](https://www.ottoit.com.au/blog/secure-business-smartphone-malware/): Smartphones are now central to how Australian business people work. They carry email, contacts, documents, two-factor authentication codes, and often direct access to business systems. This makes them a valuable target for attackers and a significant risk if not properly secured. - [Origin Energy Data Breach: What Australian Customers Need to Know](https://www.ottoit.com.au/blog/origin-energy-data-breach/): In July 2026, Origin Energy confirmed that an unknown threat actor had gained unauthorised access to its systems and stolen customer data. The company serves approximately 4.8 million customer accounts across Australia, making this one of the most significant data breaches to affect Australian consumers since the Medibank and Optus incidents of 2022. - [MFA for Australian Businesses: A Complete Guide to Multi-Factor Authentication Policy and Enforcement](https://www.ottoit.com.au/blog/two-factor-authentication-setup-guide/): Multi-factor authentication (MFA) is no longer optional for Australian businesses - it's a core requirement under the Essential Eight, expected by cyber insurers, and the single most effective control against account compromise. But most businesses treat MFA as a technical setup task when it should be a policy and governance decision. This guide goes beyond app tutorials to cover what a business-wide MFA strategy actually looks like: who must use it, on what systems, enforced how, and verified how often. - [Cybersecurity for Remote Workers: What Australian Businesses Must Have in Place](https://www.ottoit.com.au/blog/cybersecurity-remote-workers-australia/): Remote work has permanently changed your attack surface. Here is what every Australian business needs in place to secure remote workers, from MFA and Zero Trust access to device management, policies, and onboarding controls. - [Remote IT Support in Australia: What It Can and Cannot Fix Without Coming Onsite](https://www.ottoit.com.au/blog/what-can-remote-it-fix-without-onsite-visit/): One of the most common questions we hear from businesses looking at managed IT support in Australia is some version of this: "But what happens when something actually breaks and you are not here?" - [How to Spot a Phishing Email in 2026: Baseline Signs Plus Why AI Phishing Is Different](https://www.ottoit.com.au/blog/spot-phishing-email-guide/): Every employee should know the baseline warning signs of a phishing email. But here's the uncomfortable truth: AI-generated phishing attacks are now indistinguishable from legitimate emails by look alone. This guide covers both: the traditional signals that still catch the majority of phishing attempts, and the specific characteristics of AI-powered phishing that require technical controls - not just trained eyes - to stop. Read it alongside our guide on AI-powered phishing for the full picture. - [Australia’s National AI Framework: What the Albanese Government’s Office of AI Means for Australian Businesses](https://www.ottoit.com.au/blog/australia-national-ai-framework-office-of-ai/): On 15 July 2026, Prime Minister Albanese announced Australia's national AI framework and a new Office of AI — making Australia the first country to bring the economic, social, security, and environmental impacts of AI under a single coordinated structure. Here is what it means for Australian businesses. - [Cybersecurity Risk Assessment for Australian Business](https://www.ottoit.com.au/blog/cybersecurity-risk-assessment-business-australia/): A cybersecurity risk assessment is not a compliance form you fill out and file away. It is a structured process to understand what your business has, what could go wrong, and what to do about it. For Australian SMBs facing a growing range of cyber threats, it is one of the most practical steps you can take to protect your operations and your clients. - [Co-Managed IT Support: What It Is and When Your Business Needs It](https://www.ottoit.com.au/blog/co-managed-it-support/): Not every business needs to outsource IT entirely, and not every internal IT person needs to be replaced by an external provider. There is a middle ground that more Australian businesses are starting to use, and it is called co-managed IT support. - [The Lifeline Australia Data Breach: What Happened, What Was Exposed, and What It Means for Not-for-Profit Organisations](https://www.ottoit.com.au/blog/lifeline-australia-data-breach/): Lifeline Australia has confirmed a data breach after a threat actor posted staff and volunteer information on a dark web forum. The breach is part of a pattern of attacks by threat actor '2019' specifically targeting Australian not-for-profit organisations throughout 2026. - [Supply Chain Cyber Attacks: What Australian Businesses Need to Know](https://www.ottoit.com.au/blog/supply-chain-cyber-attack-australia/): A supply chain cyber attack happens when a criminal compromises a trusted supplier, software vendor, or service provider to gain access to your business systems. Your own defences may be strong, but if a tool you rely on gets breached, attackers can use that trusted connection as a backdoor into your environment. This type of attack is growing rapidly in frequency, and Australian businesses of every size are being caught in the crossfire. You do not need to be the original target. You just need to be using the same tools or services as someone who was. - [AI Adoption in Australian SMBs: What the Numbers Say and What to Do Next](https://www.ottoit.com.au/blog/ai-adoption-australian-smbs/): Something significant has happened in Australian business over the past 18 months, and most business owners have not stopped long enough to absorb what it means. The proportion of Australian small and medium businesses using AI regularly has nearly doubled: from 40% in July 2024 to 69% by January 2026. Daily AI usage has almost tripled in the same period, jumping from 9% to 28%. - [IT Support for Construction Companies in Melbourne: What the Industry Actually Needs](https://www.ottoit.com.au/blog/it-support-construction-companies-melbourne/): Most IT support providers do not understand construction. They understand offices, desks, and standard business software. They understand what it looks like when everyone is in the same building, connected to the same network, using the same devices that never leave the premises. - [NSW Rural Fire Service Data Breach: What the Nova Ransomware Attack Means for Australian Organisations](https://www.ottoit.com.au/blog/nsw-rfs-data-breach/): The Nova ransomware group compromised the NSW Rural Fire Service via a compromised remote access account in June 2026, successfully exfiltrating data despite failing to deploy encryption. Here is what Australian organisations need to know and do about remote access security. - [Harcourts Data Breach: What the SafePay Ransomware Attack Means for Australian Real Estate Clients](https://www.ottoit.com.au/blog/harcourts-data-breach/): Real estate transactions involve some of the most sensitive personal data a business ever handles. Names, addresses, photo identification, bank account details, lease agreements, rental histories — all of it sits inside the systems of Australia's property agencies. That makes real estate firms a high-value target for ransomware groups, and Harcourts, one of Australasia's largest real estate networks, is the latest to find itself in the crosshairs. - [Top 10 Microsoft Teams Features You Should Be Using in 2026](https://www.ottoit.com.au/blog/microsoft-teams-features-2026/): Microsoft Teams has evolved well beyond a video calling tool. In 2026, it is a comprehensive platform for communication, collaboration, project management, and AI-assisted work. But many business users are still only scratching the surface of what Teams can do. - [Otto IT Re-Certified as a Great Place to Work for the Fifth Consecutive Year](https://www.ottoit.com.au/blog/otto-it-great-place-to-work-2026/): Otto IT has been formally re-certified as a Great Place to Work for the fifth consecutive year, reflecting a sustained commitment to people development, professional coaching, and a culture built on trust and genuine investment in the team. - [Switching IT Providers in Australia: How to Change MSP Without Downtime or Drama](https://www.ottoit.com.au/blog/switching-managed-it-provider-australia/): Switching your managed IT provider is one of the most underestimated operational decisions an Australian professional services firm will make. The wrong approach means weeks of disruption, access issues, and a transition painful enough to make everyone reluctant to try again. The right approach - planned properly - gets you better service, better commercial terms, and a partner who actually knows your business. This guide is specifically about the switch: what to prepare, what to watch for, and how to exit cleanly without burning the relationship or the infrastructure. - [How to Host a Webinar in Microsoft Teams](https://www.ottoit.com.au/blog/host-webinar-microsoft-teams/): Microsoft Teams includes a built-in webinar feature that lets you host structured online events with registration, presenter controls, and attendee management. If your organisation runs client training sessions, product demos, internal briefings, or community events, Teams webinars are a capable and cost-effective solution that you likely already have access to. - [IT Support for Healthcare in Australia: Compliance, Security, and What Actually Matters](https://www.ottoit.com.au/blog/it-support-healthcare-australia/): Australian healthcare organisations sit at the intersection of some of the most demanding compliance obligations in the country and some of the most attractive targets for cybercriminals. Patient records are worth significantly more on the dark web than financial data. Ransomware groups actively target hospitals, clinics, and allied health practices. Regulators have made clear that treating IT as an afterthought in healthcare is no longer acceptable. - [How to Connect Claude to Microsoft 365 via MCP When Conditional Access Blocks Foreign Countries](https://www.ottoit.com.au/blog/claude-mcp-microsoft-365-conditional-access/): If your Microsoft 365 Conditional Access policy blocks foreign countries, connecting Claude via MCP will fail. Here is how to whitelist Anthropic's outbound IP range (160.79.104.0/21) as a named location in Entra ID and configure the correct policy exception, step by step. - [Otto IT Named Finalist Across Seven Industry Award Categories in 2026](https://www.ottoit.com.au/blog/otto-it-awards-finalist-2026/): Otto IT has been named a finalist across seven categories at the techpartner.news Impact Awards 2026 and the inaugural CRN Channel Awards Australia 2026, with three executives individually shortlisted for leadership honours. - [Password Manager Setup for Business Australia](https://www.ottoit.com.au/blog/password-manager-setup-business/): Setting up a password manager for your business is one of the most practical cybersecurity steps you can take this year. If your team is still using spreadsheets, sticky notes, or the same password across multiple accounts, this guide will walk you through exactly what to do about it. - [The Essential Eight Is Being Retired: Here Is What Replaces It.](https://www.ottoit.com.au/blog/essential-eight-retirement-replacement/): The ASD has announced the Essential Eight cybersecurity framework will be retired within two years, replaced by the new Essentials series built on Modern Defensible Architecture and Zero Trust principles. Here is what this means for your business and what you should do now. - [How to Spot a Fake Microsoft or Apple Support Call (And What to Do)](https://www.ottoit.com.au/blog/fake-microsoft-apple-support-call-scam/): Learn how to spot a fake Microsoft or Apple support call in Australia, what scammers want, and exactly what to do if you or your team gets targeted. - [The KPMG Data Scandal: What Every Professional Services Firm Must Learn About Client Data](https://www.ottoit.com.au/blog/kpmg-data-breach/): KPMG Australia confirmed at a parliamentary hearing that confidential Optus client data was misused internally. ASIC is now investigating three partners. Here is what every professional services firm needs to know about data governance and insider risk. - [Ochre Health Data Breach: What Patients and Businesses Need to Know](https://www.ottoit.com.au/blog/ochre-health-data-breach/): Ochre Health confirmed that patient data from its Tuggeranong clinic was compromised via a third-party platform and sold on a hacking forum, potentially affecting more than 25,000 patients including their Medicare numbers, DVA details, and appointment history. - [Microsoft Loop Team Collaboration Guide](https://www.ottoit.com.au/blog/microsoft-loop-team-collaboration/): Learn how to use Microsoft Loop for team project collaboration — workspaces, components, Copilot, and real business use cases for professional services teams. - [Otto IT Named Pax8 Champion, APAC at Beyond 2026](https://www.ottoit.com.au/blog/otto-it-pax8-champion-apac-2026/): Otto IT has been awarded the Pax8 Champion, APAC award at Beyond 2026, recognising the company's outstanding cloud growth and partner excellence across the Asia-Pacific region. - [Copilot for Sales Emails, Proposals and Follow-Ups](https://www.ottoit.com.au/blog/copilot-sales-emails-proposals/): Microsoft Copilot can draft sales emails, proposals and follow-ups inside Outlook, Word and Teams. Learn how to use it to cut writing time and recover selling hours. - [IT Support in Adelaide: What Local Businesses Need to Know Before Choosing a Provider](https://www.ottoit.com.au/blog/it-support-adelaide-guide/): Choosing IT support in Adelaide? Here is a practical guide to evaluating providers, what managed IT services should include, and how to avoid locking yourself into the wrong arrangement. - [Australian Microsoft 365 Pricing Changes from 1 July 2026: Here’s What You Need to Know](https://www.ottoit.com.au/blog/microsoft-365-pricing-changes-australia-july-2026/): Official source: Microsoft has published a full FAQ on the July 2026 pricing changes at microsoft.com/licensing/news/2026-m365-packaging-pricing-updates-faq. We recommend checking that page for the latest AUD pricing as it is confirmed closer to the deadline. - [How to Use Copilot in Outlook to Manage Your Inbox Faster](https://www.ottoit.com.au/blog/copilot-outlook-inbox-management/): Microsoft Copilot in Outlook helps you manage your inbox faster by summarising threads, drafting replies, prioritising messages, and surfacing action items without you having to read every email in full. If your inbox regularly contains more messages than you have time to process properly, Copilot can significantly reduce the time spent on email without sacrificing the quality of your responses. - [Sovereign Cloud and Local Data Hosting: Why Australian Businesses Can No Longer Afford to Ignore It](https://www.ottoit.com.au/blog/sovereign-cloud-data-hosting-australia/): For much of the past decade, the cloud conversation in Australian professional services was primarily about cost, flexibility, and enabling hybrid work. Moving workloads to cloud platforms meant lower capital expenditure on hardware, easier access for distributed teams, and the ability to scale capacity without lengthy procurement processes. The question of where data was physically stored was acknowledged as worth considering but rarely treated as a decisive factor in cloud strategy decisions. - [How to Build Custom AI Agents in Microsoft Copilot Studio: Step-by-Step for Australian Businesses](https://www.ottoit.com.au/blog/build-ai-agents-copilot-studio-australia/): Microsoft Copilot Studio lets Australian businesses build custom AI agents without writing a line of code. This step-by-step guide covers how to create, test, and deploy an AI agent inside Microsoft 365 — from scratch. - [Analyse Excel Data Without Formulas: An AI Guide for Non-Technical Staff](https://www.ottoit.com.au/blog/analyse-excel-data-ai-copilot/): Learn how to analyse Excel data using AI with Microsoft Copilot. Ask plain-English questions, create charts automatically, and get real insights from your spreadsheets without knowing a single formula. - [Excel Drop-Down List Data Validation Guide](https://www.ottoit.com.au/blog/excel-drop-down-list-data-validation/): Learn how to use Excel drop-down list data validation to reduce errors, standardise inputs, and keep shared spreadsheets clean and consistent. - [IT Support in Sydney: What Professional Services Firms Should Expect from Their MSP](https://www.ottoit.com.au/blog/it-support-sydney-guide/): Professional services firms in Sydney have specific IT expectations. Here is what to look for in a managed IT provider, what questions to ask, and what it should cost. - [How to Use Excel Pivot Tables Without Being a Data Analyst](https://www.ottoit.com.au/blog/excel-pivot-tables-beginners-guide/): Learn how to use Excel pivot tables without any data skills. This plain-English guide walks through setup, slicers, Copilot prompts, and common mistakes to avoid. - [How to Use VLOOKUP in Excel (And When to Use XLOOKUP Instead)](https://www.ottoit.com.au/blog/how-to-use-vlookup-excel/): Learn how to use VLOOKUP in Excel with a real business example, step-by-step formula guide, common errors fixed, and when XLOOKUP is the smarter choice. - [AI and Directors’ Duties: What Chief Justice Bell’s Warning Means for Australian Boards](https://www.ottoit.com.au/blog/directors-duties-ai-corporations-act-australia/): The Chief Justice of NSW has put Australian directors on notice. The legal protections most boards have relied on for decades probably do not apply when AI is involved in a decision. That is not a commentary or prediction from a technology vendor. That is the view delivered by Chief Justice Andrew Bell AC at the 2026 Harold Ford Memorial Lecture, held at Melbourne Law School on 21 May 2026. - [AI Agents for Melbourne Professional Services Firms: What You Need to Know Before Deploying](https://www.ottoit.com.au/blog/ai-agents-professional-services-melbourne/): AI agents are moving faster than most technology decisions - and professional services firms in Melbourne are in a different position than general businesses. Accounting practices, law firms, financial advisers, and consultancies face specific regulatory considerations, client confidentiality obligations, and workflow patterns that make AI agent deployment a different conversation. This guide is specifically for Melbourne-based professional services firms deciding where and how AI agents fit. - [Track Changes in Microsoft Word for Team Editing](https://www.ottoit.com.au/blog/track-changes-microsoft-word-2/): Track Changes in Microsoft Word lets every edit to a document become visible, attributed, and reviewable. When your team is collaborating on a proposal, policy, contract, or report, Track Changes gives the document owner a clear record of who changed what, and puts them in control of what stays in the final version. - [Why Is My Computer So Slow? 7 Things to Check First](https://www.ottoit.com.au/blog/why-is-my-computer-slow-fix/): Your computer is running slow, and there are several things you can check right now before calling IT. Most slow computers are not dying - they just need a bit of attention. This guide walks through the seven most common causes, in order of how easy they are to fix, so you can get back to work faster. - [How to Write an AI Policy for Your Business (With a Free Template)](https://www.ottoit.com.au/blog/ai-policy-template-australian-business/): Your staff are already using AI tools. Copilot, ChatGPT, Claude, Gemini, and dozens of niche AI products have become standard in professional workplaces. The problem is that most Australian businesses have no written policy governing how those tools should be used, what data employees can enter into them, or who is responsible when something goes wrong. - [APRA CPS 234 Explained: What Australian Financial Services Firms and Their IT Providers Must Do](https://www.ottoit.com.au/blog/apra-cps-234-explained-financial-services-australia/): Disclaimer: This post is for general informational purposes only and does not constitute legal or compliance advice. For guidance specific to your organisation, consult a qualified legal or regulatory professional. - [What Is AI Washing? How to Spot Misleading AI Claims Before You Buy](https://www.ottoit.com.au/blog/what-is-ai-washing-australia/): AI washing is when a vendor labels their product "AI-powered" without the technology to back it up. It's one of the fastest-growing forms of misleading marketing in the tech industry right now, and Australian businesses are squarely in the crosshairs. The ACCC has made AI washing an explicit enforcement priority for 2026-27, and the legal consequences for vendors are real. - [What Is the Australian Cyber Security Act 2024? A Plain-English Guide for Businesses](https://www.ottoit.com.au/blog/cyber-security-act-2024-australia-guide/): The Australian Cyber Security Act 2024 (Cth) is a landmark piece of federal legislation passed in November 2024. It introduced mandatory ransomware payment reporting, a new independent review body, and minimum security standards for internet-connected devices. If your business turns over more than $3 million annually, at least one of these obligations applies to you right now. - [Remove Fuel from the Fire: How to De-Escalate an IT Crisis Before It Spreads](https://www.ottoit.com.au/blog/remove-fuel-from-the-fire-it-crisis/): When a cyberattack or serious IT security incident occurs inside a business, the damage is rarely determined by the attack itself. It is determined by how fast the organisation responds. The difference between a contained incident that costs a few hours of remediation work and a full-scale data breach that shuts down operations for days, or weeks, comes down almost entirely to the speed and quality of the containment response. - [Cyber Incident Response Plan Australia: How to Create One (Template Included)](https://www.ottoit.com.au/blog/cyber-incident-response-plan-australia/): A cyber incident response plan for Australian businesses needs to cover six phases: Detect, Contain, Assess, Notify, Recover, and Review. It should name specific roles, define Australian notification obligations including ACSC and OAIC reporting, and be tested at least annually. Most Australian businesses discover they do not have a workable plan at the worst possible moment, when they are already under attack and making decisions under pressure with no documented process to follow. - [Transient Data Is Still Collected Data: What the Bunnings Privacy Ruling Means for Australian Businesses](https://www.ottoit.com.au/blog/privacy-act-transient-data-collection-australia/): If your business uses AI tools, automated monitoring systems, or real-time analytics, a landmark Australian tribunal ruling has just changed what you need to worry about. The decision in Bunnings Group Limited v Privacy Commissioner (ARTA 130) has confirmed that even temporarily processed personal information counts as “collected” under the Privacy Act 1988. This is not a technicality. It closes a loophole that many businesses have been unknowingly relying on, and the compliance implications are significant. - [Microsoft 365 Copilot for Business: Pricing, Value and the June 30 Deadline for Australian SMBs](https://www.ottoit.com.au/blog/microsoft-365-copilot-for-business-australia-pricing/): Microsoft 365 Copilot for Business is the AI productivity tool built specifically for Australian small and medium businesses -- and right now, promotional pricing makes it the cheapest it will ever be. At $33 per user per month (AUD), it puts AI-powered assistance across Outlook, Teams, Word, Excel and PowerPoint within reach of businesses with up to 300 users. The catch is a real one: the promotional pricing window closes on June 30, 2026. After that date, the price goes up for any new subscribers. This guide cuts through the noise and gives you a clear answer on whether your business should act before the deadline, what you actually get for your money, and what questions to ask before you commit. - [ASD Warning: Device Code Phishing Is Bypassing MFA on Australian Microsoft 365 Accounts](https://www.ottoit.com.au/blog/device-code-phishing-microsoft-365-australia/): The Australian Signals Directorate issued a formal warning on 20 May 2026 about a type of cyberattack targeting Australian Microsoft 365 users — and it is not a standard phishing campaign. Device code phishing attacks are active in Australia right now, and they are designed to bypass Multi-Factor Authentication entirely. If your organisation uses Microsoft 365 and has not reviewed your Conditional Access policies recently, this warning is for you. - [Managed IT Pricing in Melbourne: What You Should Actually Pay (and Red Flags to Avoid)](https://www.ottoit.com.au/blog/managed-it-pricing-melbourne-guide/): Managed IT pricing in Melbourne typically ranges from $80 to $400 or more per user per month, depending on the scope of services, security requirements, and level of support included. The variation is significant and intentional. Understanding what drives that range is the only way to assess whether a quote you receive is competitive, appropriate for your business, or a red flag. - [Manage Microsoft Teams Notifications Without Missing What Matters](https://www.ottoit.com.au/blog/manage-microsoft-teams-notifications/): If you have Microsoft Teams open right now, there is probably a red badge somewhere on your screen. Maybe several. You have messages you have not read, channels you have mentally muted, and a general sense that something important is probably buried in there somewhere. - [Clicked a Phishing Link? What to Do Right Now](https://www.ottoit.com.au/blog/clicked-phishing-link-what-to-do/): If you clicked a phishing link, act immediately: disconnect from the internet, don't enter any passwords, and contact your IT support. Here is exactly what to do, step by step. - [How to Share Files Securely from SharePoint (Without Emailing Attachments)](https://www.ottoit.com.au/blog/share-files-securely-sharepoint/): Learn how to share files securely from SharePoint without emailing attachments. Control permissions, set expiry dates, and manage access properly. - [How to Set Up Out of Office in Outlook the Right Way](https://www.ottoit.com.au/blog/set-up-out-of-office-outlook/): Need to set up out of office in Outlook? Here is how to do it on desktop, web, and mobile, with tips for writing a message that actually works. - [The Late Bird Catches Nothing: What Happens When You Delay IT Upgrades and Managed Services](https://www.ottoit.com.au/blog/delay-it-upgrades-managed-services/): There is a version of this story that plays out in Melbourne businesses every single week. A small business has been running on the same server since 2017. The hardware is technically functional, but it is slow, it creaks under load, and the operating system stopped receiving security updates two years ago. Everyone in the team knows the situation is not ideal. The plan has always been to deal with it “soon.” Then one Tuesday morning, the whole system goes down, and “soon” becomes an emergency that costs far more than a planned upgrade ever would have. Running on outdated IT systems is one of the most common and most costly mistakes Australian small and medium businesses make. This post is about why that delay is so dangerous, what it actually costs your Melbourne business, and what it looks like when you make the decision to act before the emergency arrives. - [What to Do in the First 72 Hours After a Data Breach: The Australian Business Response Guide](https://www.ottoit.com.au/blog/data-breach-response-72-hours-australia/): If your business has just discovered a data breach, the next 72 hours will define your legal exposure, your recovery timeline, and how much damage you can actually limit. Act in the right order, and you will meet your obligations under Australian law, contain the incident, and protect your clients. Miss the window, and the costs multiply fast. This guide gives you the exact response timeline your business needs right now. - [Australian Healthcare Practices Are the Number One Ransomware Target. Here Is Why and What to Do About It.](https://www.ottoit.com.au/blog/healthcare-ransomware-australia/): Australian healthcare organisations reported more than 500 data breaches in the first six months of 2025 alone. Each incident affected an average of more than 10,000 individuals. That figure is not a warning about a future threat. It is a description of what is already happening, right now, to medical practices, allied health providers, hospitals, and aged care facilities across the country. - [The Champion Homes Data Breach: What Happened, What Was Leaked, and What It Means for Australian Businesses](https://www.ottoit.com.au/blog/champion-homes-data-breach/): In April 2026, Champion Homes, a Sydney-based home builder, was targeted by the DragonForce ransomware operation. The attackers listed Champion Homes on their dark web leak site on 21 April 2026. When the company did not meet their demands, DragonForce published 44GB of stolen data publicly. That data included tender documents, quotes, and payroll information. Champion Homes has since confirmed the incident, reported it to the Office of the Australian Information Commissioner (OAIC) and the Australian Cyber Security Centre (ACSC), and stated that the incident is now contained with limited operational impact. - [The Gregory Jewellers Data Breach: What Happened and What It Means for Australian Businesses](https://www.ottoit.com.au/blog/gregory-jewellers-data-breach/): The Gregory Jewellers data breach is a stark reminder that no business is too small, too niche, or too trusted to be targeted by cybercriminals. Whether you are a customer of Gregory Jewellers or a business owner watching this unfold, there are important lessons and actions to take. - [How to Transfer Files from iPhone to a Windows PC Without iTunes](https://www.ottoit.com.au/blog/transfer-files-iphone-windows-pc-no-itunes/): Moving files from your iPhone to a Windows PC should be simple. iTunes was the original solution, but many people now find it slow, bloated and frustrating to use. The good news is that in 2026 you have several reliable ways to transfer your photos, videos and documents without iTunes ever touching your machine. - [How to Use Outlook Quick Steps to Automate Repetitive Emails](https://www.ottoit.com.au/blog/outlook-quick-steps-automate-email/): Outlook Quick Steps let you automate repetitive email tasks with a single click. If you spend hours each week moving, forwarding, flagging, and filing emails, Quick Steps can cut that time significantly. This guide walks through exactly how to set them up, assign keyboard shortcuts, and make them work for your workflow. - [Clean Up a Full Mailbox in Outlook Fast](https://www.ottoit.com.au/blog/clean-up-full-mailbox-outlook/): Your Outlook mailbox is full and you cannot send or receive emails. Follow this step-by-step guide to clean it up fast and keep everything you need. - [How to Recall an Email in Outlook (And When It Actually Works)](https://www.ottoit.com.au/blog/how-to-recall-email-outlook/): Learn exactly how to recall an email in Outlook, when it actually works, and what to do when it doesn'\''t. Honest, practical guide for Microsoft 365 users. - [The Instructure Canvas Data Breach: What Happened, What Schools Are Doing, and What It Means for Australian Businesses](https://www.ottoit.com.au/blog/instructure-canvas-data-breach/): As of 12 May 2026, Instructure reached an agreement with the ShinyHunters group. Under this agreement, the stolen data was reportedly returned to Instructure and digitally confirmed as destroyed. Instructure has not confirmed whether a ransom was paid as part of the resolution. - [Shared Mailbox Microsoft 365 Setup (Step-by-Step Guide)](https://www.ottoit.com.au/blog/shared-mailbox-microsoft-365-setup/): Learn how to set up a shared mailbox in Microsoft 365 step by step. Create the mailbox, grant access, and start sending from a team email address today. - [What Is Microsoft Purview and Why Does Your Australian Business Need It? (2026 Guide)](https://www.ottoit.com.au/blog/what-is-microsofts-purview-and-why-do-you-need-it/): If your business runs on Microsoft 365 and you are exploring or already using Microsoft Copilot, there is one platform you need to understand before anything else: Microsoft Purview. - [Microsoft 365 Copilot Flex Routing Australia Guide](https://www.ottoit.com.au/blog/microsoft-365-copilot-flex-routing-australia/): Microsoft 365 Copilot flex routing sends some data overseas by default. Learn what it means for Australian businesses and how to turn it off in Admin Centre. - [ACCC Microsoft Copilot Australia: What Businesses Need to Know](https://www.ottoit.com.au/blog/accc-microsoft-copilot-australia/): If your business uses Microsoft 365, the news from the ACCC this week deserves your full attention. The Australian Competition and Consumer Commission has filed a lawsuit against Microsoft Australia and its US parent corporation, alleging that approximately 2.7 million Australian subscribers were misled about their options when Microsoft rolled out Copilot. - [How to Back Up Your iPhone to Your PC: Windows 11 and Windows 10 Guide (2026)](https://www.ottoit.com.au/blog/how-to-back-up-your-iphone-to-your-pc/): If you want a full local backup of your iPhone to your Windows PC, you have two solid options in 2026. On Windows 11, Apple now offers the Apple Devices app from the Microsoft Store, which handles backups cleanly without the bloat of older iTunes versions. On Windows 10, iTunes remains the go-to method. Both approaches give you a complete local backup you can restore from at any time. - [ALS Limited Cyber Attack: What Happened and What It Means for Australian Businesses](https://www.ottoit.com.au/blog/als-limited-cyber-attack-australia/): ALS Limited confirmed a cyber attack on 4-5 May 2026 involving unauthorised access to IT systems. Here is what happened, how it affects Australian businesses, and what to do next. - [What Is a Cyber Attack? A Plain-English Guide for Australian Business Owners](https://www.ottoit.com.au/blog/what-is-a-cyber-attack-australia/): Find out what a cyber attack is, which types hit Australian businesses most often, and what to do right now if you think you're under attack. Plain English, no jargon. - [OneDrive vs SharePoint: What’s the Difference and When to Use Each](https://www.ottoit.com.au/blog/onedrive-vs-sharepoint-difference/): Not sure whether to use OneDrive or SharePoint? Learn the key differences, when to use each, and how Microsoft 365 Copilot works across both tools. - [Is Essential Eight Compliance Mandatory in Australia? What Your Business Must Know](https://www.ottoit.com.au/blog/essential-eight-compliance-mandatory-australia/): There was a time when the Australian Signals Directorate’s Essential Eight framework was treated by most small and medium businesses as something that applied to government agencies and large enterprises. For a professional services firm with 30 staff or an accounting practice with two office locations, it felt like a compliance framework designed for someone else’s problem set. That assumption has not been accurate for several years, and in 2026 it carries commercial consequences that go well beyond cybersecurity risk alone. - [Australia Cyber Incident Review Board: What It Means for Your Business](https://www.ottoit.com.au/blog/australia-cyber-incident-review-board/): Australia's Cyber Incident Review Board is now active. Learn what the CIRB does, how it works, and what Australian businesses should do to stay protected and compliant. - [Australian Privacy Act Small Business 2026: Is Your IT Ready?](https://www.ottoit.com.au/blog/privacy-act-small-business-exemption-2026/): The Australian Privacy Act small business 2026 exemption is ending. Find out what changes, who is affected, and what your IT setup needs to stay compliant. - [Microsoft 365 Azure: What Australia’s VSA6 Government Deal Means for Your Business](https://www.ottoit.com.au/blog/australian-government-microsoft-agreement-2026/): The Australian Government signed VSA6, a five-year Microsoft agreement covering Microsoft 365, Azure, Copilot, and security services. Here is what it means for your Australian business. - [Agentic AI Security Risks Australia: What Business Leaders Need to Know Now](https://www.ottoit.com.au/blog/agentic-ai-security-risks-australia/): Your AI tools are no longer just answering questions. They are taking action. They are booking meetings, writing code, sending emails, querying databases, and making decisions on your behalf, often without you even knowing. The agentic AI security risks Australia businesses face are real, significant, and something the Australian Signals Directorate is now treating as a national priority. ## Pages - [OttoIQ](https://www.ottoit.com.au/services/digital-transformation-services/business-process-automation/) - [Otto Hub](https://www.ottoit.com.au/ottohub/) - [Otto Run](https://www.ottoit.com.au/otto-run/) - [Terms & Conditions](https://www.ottoit.com.au/terms-conditions/) - [IT Procurement Services](https://www.ottoit.com.au/services/it-procurement-services/) - [Client Portals](https://www.ottoit.com.au/client-portals/) - [Webinars](https://www.ottoit.com.au/events/webinars/) - [IT Support and Digital Transformation](https://www.ottoit.com.au/case-studies/it-support-and-digital-transformation/) - [IT Support and Cloud Services](https://www.ottoit.com.au/case-studies/it-support-and-cloud-services/) - [ISO 27001, Microsoft 365, and Security‑First IT Support](https://www.ottoit.com.au/case-studies/tsa-iso27001-microsoft365-security-first-it-support/) - [IT Support and Cybersecurity Partnership](https://www.ottoit.com.au/case-studies/it-support-and-cybersecurity-msp/) - [IT Management and Cybersecurity](https://www.ottoit.com.au/case-studies/it-management-and-cybersecurity/) - [IT Partnership, Support and Cybersecurity](https://www.ottoit.com.au/case-studies/it-partnership-support-and-cybersecurity/) - [Private Wealth Management and Accounting Services](https://www.ottoit.com.au/case-studies/private-wealth-management-and-accounting-services/) - [Digital Transformation, multi departments, great success!](https://www.ottoit.com.au/case-studies/digital-transformation-multi-departments-great-success/) - [Food Manufacturing Group](https://www.ottoit.com.au/case-studies/food-manufacturing-group/) - [Alpine Shire Council](https://www.ottoit.com.au/case-studies/alpine-shire-council/) - [From rural to rocking – High-tech local government transformation](https://www.ottoit.com.au/case-studies/from-rural-to-rocking-high-tech-local-government-transformation/) - [Keeping essential services running through tech innovation](https://www.ottoit.com.au/case-studies/keeping-essential-services-running-through-tech-innovation/) - [Real estate management digitises for rapid growth](https://www.ottoit.com.au/case-studies/real-estate-management-digitises-for-rapid-growth/) - [Non-profit educational and training organisation](https://www.ottoit.com.au/case-studies/non-profit-educational-and-training-organisation/) - [Non-profit law firm](https://www.ottoit.com.au/case-studies/non-profit-law-firm/) - [Murray City Country Coast (MCCC)](https://www.ottoit.com.au/case-studies/murray-city-country-coast-mccc/) - [Heathcote Health](https://www.ottoit.com.au/case-studies/heathcote-health/) - [Half Dome](https://www.ottoit.com.au/case-studies/half-dome-cybersecurity/) - [ERH Transport](https://www.ottoit.com.au/case-studies/erh-transport-logistics/) - [Disaster Recovery in Health](https://www.ottoit.com.au/case-studies/disaster-recovery-in-health/) - [Perth](https://www.ottoit.com.au/locations/it-support-perth/) - [Adelaide](https://www.ottoit.com.au/locations/it-support-adelaide/) - [Brisbane](https://www.ottoit.com.au/locations/it-support-brisbane/) - [Sydney](https://www.ottoit.com.au/locations/it-support-sydney/) - [AI at Work: Prompting, Ideas & Governance](https://www.ottoit.com.au/events/ai-at-work/) - [We Run IT on EOS](https://www.ottoit.com.au/events/we-run-on-eos/) - [Melbourne](https://www.ottoit.com.au/locations/managed-it-services-melbourne/) - [Locations](https://www.ottoit.com.au/locations/) - [Otto IT – No B*S IT for Business](https://www.ottoit.com.au/otto-it-no-bs-it-for-business/) - [Say Goodbye to Legacy Phone Systems](https://www.ottoit.com.au/services/ucaas/phone-system-migration-voip-teams/) - [Otto IT – Australian Managed IT Services Provider](https://www.ottoit.com.au/):   - [Blog](https://www.ottoit.com.au/blog/) - [Business IT Support](https://www.ottoit.com.au/business-it-support/) - [Co-Managed IT Support](https://www.ottoit.com.au/services/managed-it-support/co-managed-it-support/) - [Case Studies](https://www.ottoit.com.au/case-studies/) - [Events](https://www.ottoit.com.au/events/) - [FAQs](https://www.ottoit.com.au/faqs/) - [Contact Us](https://www.ottoit.com.au/contact-us/) - [About](https://www.ottoit.com.au/about/) - [Innovation Fund](https://www.ottoit.com.au/innovation-fund/) - [Careers](https://www.ottoit.com.au/about/careers/) - [Meet the Team](https://www.ottoit.com.au/about/meet-the-team/) - [Meg](https://www.ottoit.com.au/about/meet-the-team/megan/) - [Jess](https://www.ottoit.com.au/about/meet-the-team/jess/) - [Alanna](https://www.ottoit.com.au/about/meet-the-team/alanna/) - [Paul](https://www.ottoit.com.au/about/meet-the-team/paul/) - [Manufacturers](https://www.ottoit.com.au/industries/it-support-for-manufacturers/) - [Government](https://www.ottoit.com.au/industries/it-support-for-government/) - [IT Equipment Leasing](https://www.ottoit.com.au/services/it-procurement-services/it-equipment-leasing/) - [Apple Products & Services](https://www.ottoit.com.au/services/it-procurement-services/apple-for-business/) - [Disaster Recovery & Business Continuity](https://www.ottoit.com.au/services/business-continuity-disaster-recovery/) - [Virtual CIO](https://www.ottoit.com.au/services/digital-transformation-services/vcio/) - [Microsoft Azure Migration](https://www.ottoit.com.au/services/managed-cloud-services/microsoft-azure-migration/) - [Digital Transformation](https://www.ottoit.com.au/services/digital-transformation-services/) - [Phone Systems](https://www.ottoit.com.au/services/ucaas/business-phone-systems/):       - [Internet](https://www.ottoit.com.au/services/ucaas/managed-internet-services/) - [Remote IT Support](https://www.ottoit.com.au/services/managed-it-support/remote-it-support/) - [Onsite IT Support](https://www.ottoit.com.au/services/managed-it-support/onsite-it-support/) - [Microsoft Azure Virtual Desktop](https://www.ottoit.com.au/services/managed-cloud-services/microsoft-azure-virtual-desktop/) - [Microsoft Azure Solutions](https://www.ottoit.com.au/services/managed-cloud-services/microsoft-azure-solutions/) - [Microsoft 365](https://www.ottoit.com.au/services/managed-cloud-services/microsoft-365-services/) - [Google Workspace Migration](https://www.ottoit.com.au/services/managed-cloud-services/google-workspace-migration/) - [Digital Workplace Migration](https://www.ottoit.com.au/services/managed-cloud-services/digital-workplace-solutions/) - [Cloud Migrations](https://www.ottoit.com.au/services/managed-cloud-services/cloud-migrations/) - [Milan](https://www.ottoit.com.au/about/meet-the-team/milan/) - [Managed Cloud Services](https://www.ottoit.com.au/services/managed-cloud-services/) - [Managed Voice & Communications](https://www.ottoit.com.au/services/ucaas/) - [Essential 8 Cyber Security Services](https://www.ottoit.com.au/services/essential-8-cyber-security-services/) - [Managed Cybersecurity](https://www.ottoit.com.au/services/managed-cyber-security-services/) - [Managed IT Support](https://www.ottoit.com.au/services/managed-it-support/) - [Accreditations](https://www.ottoit.com.au/about/partners-accreditations/) - [Social Responsibility](https://www.ottoit.com.au/about/social-responsibility/) - [Professional Services](https://www.ottoit.com.au/industries/it-support-professional-services/) - [Industries](https://www.ottoit.com.au/industries/) - [Financial Services](https://www.ottoit.com.au/industries/it-support-financial-services/) - [Construction](https://www.ottoit.com.au/industries/it-support-construction/) - [Education](https://www.ottoit.com.au/industries/it-support-education/) - [Healthcare](https://www.ottoit.com.au/industries/healthcare-managed-it-services/) - [Not For Profit](https://www.ottoit.com.au/industries/non-profit-it/) - [Legal](https://www.ottoit.com.au/industries/managed-it-services-law-firms/) - [Real Estate](https://www.ottoit.com.au/industries/real-estate-it-support/) - [Insights](https://www.ottoit.com.au/insights/) - [Privacy Policy](https://www.ottoit.com.au/privacy-policy/): Suggested text: Our website address is: https://www.ottoit.com.au. - [Services](https://www.ottoit.com.au/services/) ## Categories - [Advice](https://www.ottoit.com.au/blog/category/advice/) - [AI](https://www.ottoit.com.au/blog/category/ai/) - [Cybersecurity](https://www.ottoit.com.au/blog/category/cybersecurity/) - [How To Guides](https://www.ottoit.com.au/blog/category/how-to-guides/) - [Information Technology](https://www.ottoit.com.au/blog/category/information-technology/) - [Other](https://www.ottoit.com.au/blog/category/uncategorised/) - [Otto News](https://www.ottoit.com.au/blog/category/otto-news/)