# JamesKDesigns > IT support, cyber security and web development for small businesses on the Sunshine Coast, Queensland, and remotely across Australia. Sole trader, ABN 83 997 001 464. Cyber security work is delivered against recognised frameworks: the NIST Cybersecurity Framework and ISO 31000 for risk. Engagements are scoped and quoted in writing before work begins; the initial external review is free. On-site: Mapleton, Nambour, Maleny, Montville, Maroochydore, Buderim, Noosa, Caloundra. Remote: Australia-wide. ## Pages - [Services](https://jameskdesigns.com/services/): The full service catalogue: consultancy, Microsoft 365 audits, NIST CSF, incident response and risk, web, SEO and GEO - [Portfolio](https://jameskdesigns.com/portfolio/): Recent website builds - [About](https://jameskdesigns.com/about/): Background, qualifications and how engagements run - [Contact](https://jameskdesigns.com/contact/): Contact form and how to start - [Privacy Policy](https://jameskdesigns.com/privacy-policy/): How personal information is handled: no analytics, no tracking cookies ## Services - [Cyber Security Consultancy](https://jameskdesigns.com/services/#consultancy): Ongoing, independent advice on protecting a business's systems and data: strategy, assessment and implementation, aligned to the NIST Cybersecurity Framework. - [Microsoft 365 Security Audit and Tenancy Health Check](https://jameskdesigns.com/services/#microsoft-365): A review of an entire Microsoft 365 tenancy: accounts, permissions, multi-factor authentication, data loss prevention and audit logs, all checked against Microsoft's own recommendations, followed by implementation of the tightened controls. - [NIST CSF Controls Audit and Implementation](https://jameskdesigns.com/services/#nist-csf): A controls audit against the five NIST Cybersecurity Framework functions (Identify, Protect, Detect, Respond and Recover) with gap analysis, prioritised reporting and the remediation work to close what it finds. - [Incident Response and Risk Management](https://jameskdesigns.com/services/#incident-response): Incident response plans aligned to Australian Cyber Security Centre guidance, covering roles, escalation, communication and recovery, alongside risk assessment following ISO 31000 and the NIST Risk Management Framework. - [Web Development, SEO, GEO and Media](https://jameskdesigns.com/services/#web-media): Website design and development, SEO review covering structure, metadata, page speed and mobile performance, generative engine optimisation (GEO) so AI assistants describe the business accurately, analytics setup, and branding consistency across web and social channels. ## Writing - [SPF, DKIM and DMARC: stopping people sending email as your business](https://jameskdesigns.com/spf-dkim-dmarc-email-spoofing/): Nothing in email stops someone putting your domain in the From line. Three DNS records fix that. What each one does, how to roll them out safely, and the mistakes that break legitimate mail. - [Five things that actually keep a small business website secure](https://jameskdesigns.com/website-security-basics-small-business/): Most small sites are not targeted. They are found by a scanner looking for something it already knows how to exploit. Five fixes that remove most of that risk, in the order worth doing them. ## Common questions ### Do you offer ongoing IT support or one-off help? Both. Some clients keep me on call, others get in touch twice a year when something breaks. There is no minimum and no lock-in contract. Either way, I keep the lights on. ### How much does a cyber security assessment cost? It depends on the size of what is being assessed, so I quote a fixed price after a short look at the site. The initial external review is free, and I will tell you if a full assessment is not worth your money. ### Do you work with businesses outside the Sunshine Coast? Yes. Security assessments and web development are done remotely, so location rarely matters. On-site work is Sunshine Coast and surrounds. ### What should I do if we think we have been hacked? Get in touch before changing anything. Evidence gets destroyed quickly, and knowing how they got in matters as much as locking them out. If it is urgent, say so in the subject line and I will prioritise it. ### Do you build websites as well as manage security? Yes, and doing both is the point. Security decisions made while a site is being built are far cheaper than the same decisions made afterwards. ### What does the NIST Cybersecurity Framework actually cover? It organises security around five functions: Identify, Protect, Detect, Respond and Recover. Rather than a checklist of controls, it is a structure for making sure nothing whole is missing. Most small businesses discover they have spent everything on Protect and almost nothing on Detect or Respond. A controls audit measures your systems against all five and produces a gap analysis for each. ### What is SMB1001 and does my business need it? SMB1001 is a cyber security certification standard written for small and medium businesses. It is multi-tiered, so you certify at a level that matches your size and work upward. It is worth pursuing if clients, insurers or tenders are asking you to demonstrate a security position. From 1 January 2027 the full 2027 edition is free to access at smb1001.org, including for any technical support specialist working with up to three client organisations. I do not offer SMB1001 certification as a paid service because of that three-client limit, but I am happy to talk through which tier fits you at no charge. ### Is Microsoft 365 secure by default? No. A default Microsoft 365 tenancy leaves multi-factor authentication optional, administrator rights broadly assigned and data loss prevention switched off. Microsoft provides strong security capability, but it has to be configured. Buying the licences does not turn it on. A tenancy health check finds what is exposed and tightens it. ### Do you work with businesses outside the Sunshine Coast? Yes. Security assessments, framework audits, Microsoft 365 reviews and web development are all delivered remotely, so location rarely matters. On-site work covers Mapleton, Nambour, Maleny, Montville, Maroochydore, Buderim, Noosa and Caloundra. ## Contact Email: bugzie@pm.me Hours: Monday to Friday, 9am to 5pm AEST (Queensland does not observe daylight saving)