Secondsign
Independent security oversight · Australia-wide

For small professional practices

When your practice is tested, your record is ready.

Sooner or later an incident, an insurer or an accreditor asks what you have been doing about security. The answer needs to already exist. Secondsign keeps it written down, current, and signed by someone independent of the people who run your IT.

Book a readiness call

20 minutes. We do not need access to your systems.

What we promise

Three promises, and what each one means

01
Your record of security checks stays current and signed.

Your readiness checklist stays current on a set review cycle, and your incident plan is ready before you need it. The record builds as the work happens.

02
We watch from the outside and tell you what we find.

We watch your practice from the outside, the way an attacker would. Leaked staff passwords and logins nobody closed are the usual finds. You hear about a problem while it is still quiet.

03
If it happens on our watch, Notion Digital Forensics responds.

An Australian forensic investigator picks up the work, and they already know your practice, because they have been watching it all month.

What you actually receive

Two documents, whether or not anything happens

Most of what we do happens quietly in the background. These two documents are how you see it, and they arrive on a schedule whatever kind of month it has been.

Readiness attestation Reviewed quarterly

A signed statement of where your practice stands.

Current

Two-step logins on email and records Checked
Backups tested, not just running Checked
Who can access what, reviewed Checked
Incident plan current and rehearsed Checked

An expert independent of the provider doing your IT work signs the attestation. It records what was checked, and when, in plain terms.

Monthly summary Same date every month

One page, in plain English. A practice manager can read it in 4 minutes and know what, if anything, needs a decision.

· What we saw from outside your practice
· What changed since last month
· What we asked your IT provider to fix
· What needs a decision from you

It is written plainly enough to forward to an accountant, a broker or your own board.

Specimen layouts, not a real practice. We tailor the content to your practice and your profession.

Why independent

The second signature

A provider who builds and runs your defences cannot independently check them, and your insurer knows it.

That is the gap Secondsign fills, and it is where the name comes from. Yours is the first signature on the state of your practice. Ours is the second.

We work alongside your existing IT provider rather than replacing them. We identify the risk, specify the fix, and hand clear instructions to your provider. Your provider does the work and invoices you directly.

We never touch the implementation, so there is nothing we can quietly sell you at the other end of a finding. That separation is built into how Secondsign works.

Do not have an IT provider? Ask us. We can introduce you to Australian providers who already work to the standard we check against.

Fit

Who this is for, and who it is not

Built for

  • small professional practices across Australia: medical, legal, accounting and financial services
  • practice owners and practice managers who carry the security question personally
  • practices happy with their IT provider, with no way to check the security side of it
  • anyone asked for evidence by an insurer or an accreditor who then had to go looking.

Not built for

  • organisations large enough to employ their own security team
  • day-to-day IT support: servers, licences, hardware and networks, which stay with your provider
  • IT firms and managed service providers.

If you look after practices, you are how the work gets done, not who we sell to. We would rather work alongside you.

Notion Digital Forensics

Secondsign is backed by Notion Digital Forensics

Notion Digital Forensics is an Australian digital forensics practice. Its principal, Matt O'Kane, has been in IT since 1996 and in security and digital forensics since 2018. He has given expert evidence in the Federal Court of Australia and the Supreme Court of New South Wales. Your attestation carries his signature, and his practice responds if something happens.

Ready is how you sleep at night.

Book a readiness call

1300 123 099

Within Australia. From overseas, call +61 2 8006 0855.

Monday to Friday, 8 am to 6 pm AEST.