COMPANY DIRECTORS:
If There’s a Breach, You’ll Be the One Answering For It
Cyber security is now every Australian director’s personal responsibility, so when there’s a breach, the regulator and every affected customer will want answers from you. The good news is, you don’t have to work out whether you’re exposed, because that’s our job.
Find out if you have a problem, without working it out yourself
Book a free 30-minute check-up with Winbasic. We ask the questions, you don’t need any answers ready, and you’ll come away knowing whether there’s a problem and what fixing it would involve.
Prefer to check things yourself first? Get the instant assessment.
Cyber security is now every Australian director’s personal responsibility, so when there’s a breach, the regulator and every affected customer will want answers from you. The good news is, you don’t have to work out whether you’re exposed, because that’s our job.

Book a free 30-minute check-up with Winbasic. We ask the questions, you don’t need any answers ready, and you’ll come away knowing whether there’s a problem and what fixing it would involve.
Here’s What Lands on You Personally
You’ll be the one explaining it. If someone gets into your systems, you’ll be explaining it to every customer whose details were taken, and to a regulator who’ll want to know what you did before it happened.
Your name can end up on a public register. In serious cases a court can disqualify you from managing any company in Australia, and that ban sits on ASIC’s public register, searchable by anyone, including your bank or an investor.
The penalty comes out of your own pocket. The maximum civil penalty for breaching your duty of care can run past $1.8 million, and the Corporations Act bars your company from paying it for you.
None of this requires you to become a cyber expert. It just requires someone to check.
What Happens in Your Free Check-Up
1.
Pick a time that suits.
We’ll call you at the time you choose, and it takes 30 minutes.
2.
We ask the questions.
You don’t need anything prepared. We’ll talk through how your IT is run, who looks after it and what your insurance assumes is in place.
3.
You’ll know where you stand.
You’ll come away knowing whether there’s a problem and what fixing it would involve. If a detailed Winbasic review makes sense, we’ll explain what that engagement involves, and what happens next is entirely up to you.
Who You’ll Be Talking To

David Webb (Director) and the Winbasic team have provided cyber security & managed IT services to Australia since 1996.
Winbasic has personnel who hold Australian Government security clearances, and we work as a strategic partner rather than a break-fix helpdesk, so you deal directly with the people who’d manage your systems instead of a ticket queue.
or simply call 07 3385 0888
Find Out Where You Stand Before The Regulator Does
It’s 30 minutes, it’s free, and you don’t need to prepare a thing.
Questions Directors Ask
Is this only relevant to large or listed companies?
No. Directors' duties under the Corporations Act apply regardless of company size, including single and two-director companies with no formal board. You don't need board meetings for the duty to apply. A documented decision you've made and signed is enough to show you took it seriously.
Does this apply to me if I’m a non-executive director, CEO or CFO?
Yes. Non-executive directors owe the same core duties as executive directors, and the Section 180 duty of care also reaches senior executives such as a CEO, CFO, company secretary or general counsel who make or take part in decisions affecting the whole or a substantial part of the business.
Your title doesn’t decide it. Someone who acts as a director, or whose instructions the board usually follows, can be treated as one.
Can I rely on our IT provider to have this covered?
Only if you’ve checked. The Corporations Act lets directors rely on expert advice, but it only treats that reliance as reasonable if you act in good faith and make your own independent assessment of what you’ve been told. Accepting “IT’s got it covered” at face value, with nothing to back it up, doesn’t earn you that protection.
