At Dundas Lawyers®, we provide comprehensive legal services tailored to cyber security consultants, supporting their businesses across commercial, regulatory and risk-related matters. We work with cyber security consultants to help them manage legal obligations, protect their interests and operate with confidence, including advising on governance, risk management and compliance (GRC) requirements where relevant.
Uncommon Nous® for cyber security consultants
Dundas Lawyers® has an Uncommon domain expertise for cyber security consultants, having achieved the gold level of the SMB1001 cyber security standard.
SMB1001 is a multi-tiered cyber security certification standard for small and medium-sized businesses. It is produced by Dynamic Standards International (DSI) and updated every year to keep pace with the fast-changing cyber environment.
SMB1001 gold level certification requires businesses to implement twenty-three (23) controls across five (5) domains:
- technology management;
- access management;
- backup and recovery;
- policies, processes and plans; and
- education and training.
Our services for cyber security consultants
Dundas Lawyers® services for cyber security consultants include, but are not limited to, assisting with:
- commercial and technology contracts, including consulting agreements and risk allocation;
- privacy, data protection and confidentiality obligations;
- regulatory compliance and engagement with regulators;
- GRC and standards-aligned legal advice (SMB1001, ISO 27001);
- incident and data breach response from a legal perspective; and
- dispute prevention, liability management and regulatory enforcement matters.
Why choose Dundas Lawyers®?
Having exerted Blood Sweat and Years® since April 2010 we are the team you want on your side for the long term to act as the ‘bodyguard’ for your business in cyber security consultancy. Some of the reasons clients choose Dundas Lawyers® include:
- our Uncommon business acumen;
- our Uncommon expertise in transactional, compliance and litigious matters;
- our Uncommon expertise in forensic case preparation;
- our Uncommon customer focus;
- the fact that we don’t just know law, we know business!;
- how we leverage our Uncommon Nous® to provide client-centric solutions.
Considering getting a lawyer to advise your business?
For a confidential, no-obligation initial telephone call to find out how we can help your business gain an uncommon advantage in cyber security consultancy, please phone our team on either 1300 386 529 or 07 3221 0013.
Malcolm Burrows B.Bus.,MBA.,LL.B.,LL.M.,MQLS.
Legal Practice Director
T: +61 7 3221 0013 (preferred)
M: +61 419 726 535
E: mburrows@dundaslawyers.com.au
Legislation
- Security of Critical Infrastructure (SOCI) Act 2018 (Cth)
- Security of Critical Infrastructure Rules 2018 (Cth)
- Surveillance Legislation Amendment (Identify and Disrupt) Act 2021 (Cth)
- Criminal Code Act 1995 (Cth)
- Criminal Code Regulations 2019 (Cth)
- Competition and Consumer Act 2010 (Cth)
- Competition and Consumer Regulations 2010 (Cth)
- Privacy Act 1988 (Cth)
- Privacy Regulations 2006 (Cth)
Recent insights for cyber security consultants
-
Overview of the Ransomware Payments Bill 2021 (Cth)
Australian government proposed the Ransomware Payments Bill 2021 (Cth) (Bill) to enforce mandatory reporting of ransomware payments. Penalties of up to $110,000 for non-compliance.
-
International businesses subject to Australian privacy laws
Australian Intelligence Community (AIC) Commissioner Falk determined how the Office of the Australian Information Commissioner (OAIC) will assess if international entities have an Australian Link to Privacy Act 1988 (Cth).
-
Swiss company hands over user data
A Court order in Switzerland raises questions about Australian law enforcement’s ability to access encrypted data. This article explores the legislative perspective on accessing private or business communications, and the steps taken to protect transmitted information.
-
The Australian Cyber Law Map – overview
The Australian Cyber Law Map provides clarity on ever-changing legal landscape, covering commercial enterprises, cyber offences, infrastructure, international law, national security and personal rights. A source for understanding laws and providing safety/security in the digital age.
-
Warning – Facebook trolls ordered to pay $150k damages
An online defamation case has resulted in two trolls being ordered to pay a hefty sum in damages. Learn more about the case and the potential consequences of making false claims online.
-
De-encryption laws: compelling tech giants to cooperate with law enforcement
The Australian Government is introducing encryption-related legislation that could have significant implications. Get the full scoop on what this Bill could mean for companies and citizens before it is officially announced.
-
Data Breach Bill 2016 – key data security considerations
The Privacy Amendment (Notifiable Data Breaches) Bill 2016 has been passed, making notification of data breaches mandatory from 23 February 2018. Find out how this could affect you and what measures you can take to protect your data.
-
Data security – the increasing burden
The consequences for an Australian business victim for a breach of cyber security are forecast to exponentially increase. In February 2015 the Parliamentary Joint Committee on Intelligence and Security (Committee) recommended the introduction of mandatory data breach notification scheme (Scheme) by the end of 2015.[1] Whilst the details of the incoming Scheme are currently scant,…
Recent Federal Court decisions regarding cyber security consultants
-
Australian Information Commissioner v Australian Clinical Labs Ltd (No 2) [2025] FCA 1224
PRIVACY ACT – Where an APP entity breached Australian Privacy Principle (APP) 11.1 of the Privacy Act 1988 (Cth) (Act) by failing to take reasonable steps to protect personal information from unauthorised access or disclosure – what constitutes “reasonable steps” – where an APP entity interfered with the privacy of 223,000 individuals under s 13(1)…
-
Singtel Optus Pty Ltd v Robertson [2024] FCAFC 58
PRIVILEGE – legal professional privilege – third party report – investigation into cyber-attack – whether the report was created for the dominant purpose of legal advice – multiple purposes for commissioning report – unchallenged evidence – adverse inference – failure to adduce specific and focused evidence – time for assessing dominant purpose PRACTICE AND PROCEDURE…
-
Khan v Google LLC [2023] FCA 785
Leave to proceed granted in Federal Court of Australia on application served outside Australia. Court orders preliminary discovery on more confined terms than those initially sought.
