In my last article, I looked at the growing confusion many Australian businesses are facing when it comes to cyber security standards. There is no shortage of guidance. Between ISO 27001, Essential Eight, the ISM, CIRMP, VPDSS, RACGP guidance, legal sector expectations and SMB1001, most businesses are not struggling because there is nothing available. They are struggling because there is too much to take in, and not enough plain-English advice on where to start. That is where