Technology standards
Last updated: 28 October 2026.
These are the minimum standards your technology needs to meet for us to support it properly and keep it secure. They form part of our General Terms and Conditions and your service agreement. We update them as technology ages and new versions are released.
If you don’t meet them yet
That’s normal for new clients. During onboarding we check your environment against these standards and agree a plan and timeline to close any gaps, taking your budget into account. If you choose not to adopt part of a standard, we record that decision and its risks in a short risk acceptance that you sign. We may charge for time spent on issues caused by items that don’t meet the standards.
Essential Eight
For managed clients with Microsoft 365 Business Premium, the minimum is the Australian Cyber Security Centre’s Essential Eight at Maturity Level One. If you don’t have Business Premium, the security baseline below applies, and we will recommend Business Premium on your technology roadmap.
Security baseline
Identity and access
- Multi-factor authentication (MFA) for every user, with phishing-resistant methods for administrators and high-risk roles
- Separate named accounts for administration
- Conditional Access policies where your licensing allows
- Legacy sign-in methods turned off where not needed
- Access removed promptly when people leave
Computers and devices
- Supported operating systems and applications only
- Central device management, patching and updates
- Endpoint detection and response (EDR) on every device
- Controlled local administrator access
- Disk encryption and secure configuration where supported
Email and collaboration
- Anti-phishing and spam protection
- Protection against impersonation and suspicious external messages
Network
- Supported and managed firewalls, switches and Wi-Fi
- Network segmentation and controlled administrative access
- Secure remote access, with no management interfaces exposed to the internet
Backup and recovery
- Protected backups of important systems and data, including Microsoft 365
- Backup failures monitored and acted on
- Retention that suits your business
- Recovery tested in proportion to the risk
Hardware and software lifecycle
| Item | Standard |
|---|---|
| Desktops and laptops | Business warranty of at least 3 years. Plan replacement at 4 years and replace by 5, or sooner if Windows support ends |
| On-premises servers | 5-year warranty. Plan retirement or a move to the cloud from year 5. Never in production without hardware and operating system vendor support |
| Firewalls, switches and Wi-Fi | Replace before the vendor stops releasing firmware and security updates |
| UPS batteries | Test or replace every 3 to 5 years |
| Operating systems, Office, browsers, PDF readers and security software | Vendor-supported versions only |
| Business applications | A vendor-supported version |
Windows
- Every computer runs a supported version of Windows 11. Computers that can’t run Windows 11 are replaced
- Windows 10 Extended Security Updates only by agreement, with a replacement date within 12 months
- Windows Server 2016 support ends on 13 January 2027 (AEST). Any remaining 2016 servers need a plan to replace, migrate or retire them
Our platforms
We deliver our services on proven business platforms, including Microsoft 365 (Business Premium recommended), Kaseya and Datto, 3CX and Ubiquiti. We will recommend the right products for your business during onboarding and at your reviews.
Questions
Talk to us on (07) 4401 5141 or hello@curity.com.au.