Managed security that keeps your organisation safe without getting in your people’s way, so you can feel confident, not anxious, about what’s out there.
We help organisations protect their people, systems and data through practical, layered cybersecurity. From prevention and monitoring to governance and compliance, we help reduce risk while keeping security manageable and aligned with your business.
Most incidents start with a person, not a server. We put sensible protection around email, identities and devices, and make the safe path the easy path.
Round-the-clock monitoring that spots the warning signs early and acts fast, so a small event stays small instead of becoming a bad week.
Clear reporting and documented controls that stand up to clients, insurers and auditors, the evidence that you take this seriously.
Attackers increasingly target smaller organisations precisely because they assume no one is watching. Good security today is layered, managed and always on, not a firewall you bought once and forgot.
Good security today isn’t a product you buy once. It’s layers of protection, actively monitored and maintained, with around-the-clock coverage available where it’s needed. We put those layers in place and take ownership of the whole picture, so a small event stays small.
You get the peace of mind of knowing someone capable is always watching, quietly handling the risk in the background while your people get on with their work.
We use the NCSC’s Minimum Cyber Security Standards as our benchmark for baseline protection. It is the New Zealand government’s reference for good security practice, so you have a clear, recognised standard to measure against, not just our word that you are covered.
New Zealand threat landscape
Real figures from the NCSC Cyber Threat Report 2025. Choose a view, then select any item to see what it means and how we help protect against it.
Real protection is a set of layers working together. We put them in place, keep them current, and take ownership of the whole picture so nothing falls between the cracks. Our layered approach commonly draws on proven technologies such as Microsoft Security, Fortinet and Huntress, selected where they fit an organisation’s environment and risk.
The front door for most attacks, filtered, monitored and hardened, with your team guided on what to watch for.
Modern protection on every device that detects unusual behaviour and can isolate a threat before it spreads.
Multi-factor authentication and sensible access controls, so the right people get in and the wrong ones don’t.
Tested backups are only half the story. We plan for the bad day, so if ransomware or disaster strikes, you know exactly how fast you’ll be working again, measured in hours, not weeks.
One security service, delivered and managed end to end by IT Works. For organisations that need it, an enhanced 24/7 security operations capability watches, verifies and responds around the clock, so real threats are dealt with quickly rather than sitting undetected.
Real analysts, assisted by smart automation, watch your environment day and night. Every alert is verified by a person before it reaches you, so alerts are rare, real and actionable.
Goes far beyond antivirus. We hunt the footholds and persistence tricks attackers rely on, and can isolate a compromised device in minutes to stop a threat spreading.
Identity is the new front door. We detect and shut down account takeovers, business email compromise, suspicious logins and malicious inbox rules before they do damage.
Most attackers exploit messy settings, not clever exploits. We continuously find and close misconfigurations, risky access and policy drift so those doors stay shut.
Short, engaging training and realistic phishing simulations that turn your people into a genuine first line of defence, without the boring compliance-video feel.
Security-relevant logs retained, searchable and reportable, giving you the evidence insurers, auditors and key clients increasingly ask for.
New Zealand organisations reported nearly 6,000 cyber incidents and $26.9 million in direct losses in 2024/25 (NCSC Cyber Threat Report). Insurers have responded by raising the bar: multi-factor authentication, modern endpoint protection, tested backups and a written incident response plan are now baseline questions on NZ proposal forms, and “partially implemented” surfaces at claims time. We keep you on the right side of that line.
MFA everywhere it matters, modern endpoint detection on every device, patching on a schedule and tested backups, the controls NZ insurers now expect, implemented properly rather than partially.
Documentation that shows your controls are real: where MFA is enforced, when patches landed, when a restore was last tested. If a claim or an audit ever comes, the proof already exists.
A written incident response plan, walked through with your leadership team, so the first hours of a bad day are rehearsed, not improvised. Many insurers look favourably on a plan tested within the last year.
Security leadership
Effective cybersecurity requires more than technology. Protecting modern organisations demands experienced professionals who understand security, infrastructure, cloud platforms, risk management and the constantly evolving threat landscape.
At IT Works, our cybersecurity services are supported by senior technical leaders who help clients strengthen security, reduce risk and build resilience across their technology environment.
Jaco van Staden brings nearly two decades of experience across cybersecurity, cloud platforms, networking, infrastructure and Microsoft technologies.
His expertise spans Microsoft Azure, Microsoft 365, Windows Server, Fortinet security platforms, networking, infrastructure design and business-critical systems. This breadth of experience helps ensure cybersecurity decisions are practical, effective and aligned with the realities of modern business environments.
As part of the IT Works technical leadership team, Jaco works alongside our support, engineering and advisory teams to help organisations strengthen their security posture, improve resilience and reduce operational risk.
His experience supports clients across areas including
Modern cybersecurity cannot be solved by technology alone. Our clients benefit from a combination of experienced engineers, security specialists, strategic advisers and operational teams working together to reduce risk, improve resilience and support secure growth.
That’s our job. We handle the detail, translate the risk into plain English, and help you make confident decisions about what to protect and how far to go, matched to your organisation, never over-engineered.
IT Works help keep our technology reliable, secure and fit for purpose, so our people can stay focused on the important mahi they do every day.
IT Works are responsive, straightforward and practical, helping us understand our options across managed IT, security, Microsoft 365 and Copilot.
Take our free Security Health Check, or talk to us about a layered plan that fits your organisation and your appetite for risk.
0800 448 967 or book a time below
