Cyber Security FAQ

Cyber Security FAQs,
Answered for Perth Businesses

Plain-English answers to the cyber security questions Perth business owners ask us most, from the threats that target small businesses to the tools and standards that stop them. Each answer starts with a short definition and links to the service that covers it in detail.

Common cyber threats

The attacks Perth small businesses run into most, and what stops them.

What is phishing?

Phishing is a scam email, text or message designed to trick someone into clicking a malicious link, opening an infected attachment or handing over a password, often by impersonating a supplier, a bank or a colleague. PC Madness tackles it from both sides: Check Point Harmony email security analyses suspicious emails before they reach an inbox, and security awareness training with simulated phishing tests teaches staff to spot the ones that get through.

Security awareness training

What is ransomware?

Ransomware is malware that encrypts a business's files and demands payment to unlock them. The defences that matter are stopping it on the device and being able to recover without paying. Our endpoint detection and response (EDR) protection isolates an infected device automatically and has a ransomware rollback capability, and independent cloud backups keep clean, encrypted copies of your data.

Cloud backups for Microsoft 365 & Google Workspace

What is a zero-day exploit?

A zero-day exploit is an attack that uses a software flaw before the vendor has released a fix, so there's no known malware file for traditional antivirus to recognise. EDR catches it by watching how the device behaves instead, and patching closes the hole once the fix is released.

Patch management

What is a stealer log?

A stealer log is a file of saved logins and browser data harvested from an infected device by information-stealing malware, then traded on dark web marketplaces and breach forums. Along with user lists leaked from breached websites, it's one of the most common ways staff passwords end up exposed without your own systems being breached.

Dark web monitoring

What is account takeover?

Account takeover is when an attacker gains control of a real user account, often by stealing an active session cookie or authentication token rather than the password itself. Multi-factor authentication doesn't always stop it, because the attacker can ride along on a session that's already signed in. Spotting the unusual sign-in or behaviour afterwards, and shutting it down quickly, is what identity threat detection and response is built for.

Identity threat detection and response

Security tools and services

What each layer of managed security does, in plain English.

What is EDR, and how is it different from antivirus?

EDR is security software on each device that monitors how the device behaves. Traditional antivirus mainly blocks files it already recognises as malicious, while EDR can also catch zero-day exploits and attacks that don't use a known malware file, then isolate the device and remediate the threat automatically. PC Madness runs it on Windows, macOS, Android and Linux devices.

Endpoint detection and response

What is MDR?

Managed detection and response (MDR) is EDR plus a team that monitors the alerts and acts on them, so a detection doesn't sit unread. With PC Madness you get both: EDR technology on every endpoint, managed by our team, with monthly reporting on detections, blocked threats and device health.

Managed detection and response

What is multi-factor authentication?

Multi-factor authentication (MFA) asks for a second proof of identity, such as a code from an authenticator app, as well as a password. A stolen or leaked password on its own then isn't enough to get into an account. MFA is part of the identity management in PC Madness's security protection.

Managed IT security protection

What is DNS filtering?

DNS filtering stops devices reaching malicious or unwanted websites at the moment the web address is looked up, before the page loads. PC Madness includes DNS filtering and application blocking with its EDR / MDR protection.

DNS filtering with EDR / MDR

What is a business VPN?

A business VPN (virtual private network) gives staff an encrypted connection to the resources they need, whichever network they're on. The business VPN PC Madness provides controls access to resources and blocks malicious sites, and is paired with business password management that enforces company-wide password policies.

Business VPN and password management

What is dark web monitoring?

Dark web monitoring is continuous scanning of dark web marketplaces, breach forums and stealer logs for credentials and information linked to your business. PC Madness monitors your staff email addresses, company domain and brand, and alerts you in real time when a match appears so the exposed password can be changed.

How dark web monitoring works

What is security awareness training?

Security awareness training is an ongoing program that teaches staff to recognise and respond to phishing, fake invoices, impersonation and other social engineering. Ours combines simulated phishing tests with short micro-learning lessons, so people learn by practising rather than by reading a policy.

Phishing simulations and training

What is ITDR?

Identity threat detection and response (ITDR) watches what an account does after it signs in, looking for a hijacked session, a stolen token or other signs of a compromised identity across Microsoft 365, Entra ID, Okta and on-premises Active Directory. A confirmed compromise can be shut down by suspending the account and revoking its sessions or tokens, automatically or in one click. PC Madness runs ThreatDown ITDR for Perth businesses, with 24/7 monitoring.

ITDR identity threat detection

Managing your IT

How managed IT works day to day, and how it differs from calling someone when things break.

What is patch management?

Patch management is keeping operating systems and applications up to date with the security fixes their vendors release. PC Madness automates it with enterprise-grade Remote Monitoring and Management (RMM) tools, covering both operating system and third-party application patching.

Patch management via RMM

What is RMM?

RMM tools let an IT team monitor and update devices remotely and automatically, using scheduled, tested and monitored policies, instead of someone working on each device by hand. They're what make 24/7 monitoring and most day-to-day management possible without a site visit.

How patching via RMM works

What's the difference between managed IT and break-fix IT support?

With break-fix IT support you call someone after something has gone wrong and pay for each job. With managed IT, a provider looks after your systems continuously for a flat monthly fee, with 24/7 monitoring, patching, backups and security, so problems can be caught before they cause downtime. Every PC Madness managed IT package has cybersecurity built in.

Managed IT services

What's the difference between co-managed and fully managed IT?

Co-managed IT means an outside provider works alongside your in-house IT staff and shares the workload. Fully managed IT means the provider looks after all of it. PC Madness offers both, and your quote sets out exactly which services are in your plan.

How managed IT pricing works

Why do Microsoft 365 and Google Workspace need a separate backup?

Microsoft and Google keep their platforms running, but if files are deleted, overwritten or encrypted by ransomware, those changes are kept too. An independent cloud backup keeps a separate, encrypted copy of your emails, documents and files that can be restored, from a single file to your entire system.

Microsoft 365 & Google Workspace backup

Compliance and standards

The Australian framework insurers and larger clients increasingly ask about.

What is the Essential Eight?

The Essential Eight is a set of eight mitigation strategies published by the Australian Signals Directorate (ASD): patch applications, patch operating systems, multi-factor authentication, restrict administrative privileges, application control, restrict Microsoft Office macros, user application hardening and regular backups.

Essential Eight compliance

What are the Essential Eight maturity levels?

The ASD's maturity model rates each of the eight strategies separately, from Maturity Level Zero, where a strategy isn't meaningfully in place, to Maturity Level Three, where it's fully aligned with the strategy's intent and built to stop more determined attackers.

Essential Eight assessments
Common Questions

Still have a question?

Yes. Cybersecurity is embedded into every PC Madness managed IT package as standard, not sold as an optional add-on, and your quote sets out exactly which services are in your plan.

Ask us. Call 08 9250 4554 or send us a message, and one of our team will explain it in plain English and how it applies to your business.

Request a free, obligation-free IT security audit. One of our team will be in touch within 24 hours to arrange a short discovery call, then assess your systems remotely or on-site and deliver a full report with recommendations.

Client Reviews

What Our Clients Say

Real reviews from businesses we've partnered with

S

Stephen Naughtin

199 reviews - Naughtin Financial Service

I have been dealing with PC Madness for over 15 years who offer a Friendly honest genuine service with a can do attitude. PC Madness are more than just fixing computers. They are an addition to your business able to set up websites and keeping private information safe. Highly recommended John and his team in Midland.

S

Saajan Joseph

1 review - Razorback Mining

John has provided great service and support to our business, consistently being there when required for all our IT needs.

R

Rick Staltari

3 reviews - RCM Plumbing And Gas

We use PC Madness service for web design, hosting and general web needs. Professional and knowledgeable team, highly recommend.

C

Chris Henwood

1 review - Facade Site Services

Was a pleasure moving all our emails and server with John. So easy and professional. Highly recommend anyone that is looking to use PC Madness. Thanks John

C

Caversham House

6 reviews - Caversham House

PC Madness has been servicing our company for over 8 years. We have had nothing but the best service from day one. No job is too big or too small and any assistance needed is quickly attended to. Knowledgeable, professional and friendly makes us as a customer very happy :)

P

Peta Wootton

Google review

Exceptional end-to-end ITC support and advice. Both business and personal environments, John and the team excel. Fair pricing, friendly service and great availability…five stars!

S

Stephen Naughtin

199 reviews - Naughtin Financial Service

I have been dealing with PC Madness for over 15 years who offer a Friendly honest genuine service with a can do attitude. PC Madness are more than just fixing computers. They are an addition to your business able to set up websites and keeping private information safe. Highly recommended John and his team in Midland.

See all reviews on Google
Locally Owned & Operated

About PC Madness

Since 2005, PC Madness has been a leading Managed Service Provider (MSP) in Perth, delivering enterprise-grade IT solutions to small and medium-sized businesses. We exist to simplify technology, ensuring your systems are secure, efficient, and aligned with your business goals.

With a dedicated team of technicians based in Midland and mobile support across the Perth metropolitan area, we provide rapid response times and personalized service that big telcos can't match. Whether you need a full cybersecurity audit, Microsoft 365 migration, or reliable 24/7 monitoring, PC Madness is your local partner in technology.

Service Areas:

Serving businesses in Perth CBD, Midland, Malaga, Wangara, Welshpool, Osborne Park, and surrounding suburbs. See all the areas we serve.