1. Definitions
“Package” means the DIY Cyber Security Package, comprising the Materials listed in clause 2.
“Materials” means all digital content included in the Package, including implementation guides, self-assessment checklists, policy templates, training resources, awareness posters, validation scripts, Excel registers, and any other downloadable or online content provided as part of the Package.
“Platform” means the Cyber Beacon website and membership portal through which the Materials are accessed.
“DIY Check-In” means the optional 30-minute video consultation available for separate purchase alongside or after the Package.
“Essential Eight” means the ACSC Essential Eight Mitigation Strategies as published by the Australian Signals Directorate.
2. Package Contents
The Package includes the following Materials, delivered digitally via the Platform:
- Self-Assessment Guide: Structured checklists aligned to the ACSC Essential Eight Assessment Test Plan (Maturity Level 1), including gap analysis worksheet, assessor-ready evidence list, and progress tracker.
- Implementation Guides: Platform-specific step-by-step configuration guides covering all 48 ML1 requirements across the following platforms: Windows + Microsoft 365, Windows + Google Workspace, Windows + On-Premise, macOS + Microsoft 365, macOS + Google Workspace, iOS/iPadOS, Android, and Chromebook + Google Workspace. Guides include annotated screenshots, validation scripts, Excel registers, troubleshooting sections, and assessor evidence callouts.
- Policy Templates: Customisable Microsoft Word (.docx) policy templates including Information Security Policy, Acceptable Use Policy, Incident Response Plan, Business Continuity Plan, Remote Work Policy, and Password & Access Policy.
- Training Resources: Presentation packs, quizzes, facilitator notes, and reference materials covering Essential 8 Awareness, Phishing Awareness, Password Security & MFA, Mobile Device Security, Safe Browsing & Email, and Incident Reporting.
- Awareness Posters: Professionally designed security awareness posters in print-ready PDF and digital formats.
The Package does not include any consulting services, system access, configuration work, security assessment, or review of the Customer’s IT environment. The optional DIY Check-In is a separate service governed by clause 11.
3. Licence and Access
3.1 Licence Grant
Upon payment in full, Cyber Beacon Pty Ltd grants the Customer a non-exclusive, non-transferable, non-sublicensable licence to access and use the Materials for the Customer’s own internal business purposes. This licence is granted to a single legal entity (the Customer’s business) and extends to the Customer’s employees, contractors, and IT service providers acting on the Customer’s behalf, solely for the purpose of implementing the Essential Eight within the Customer’s own IT environment.
3.2 Lifetime Access
The licence includes ongoing access to the Materials via the Platform for as long as the Platform remains operational, including access to updates and revisions published by Cyber Beacon Pty Ltd at its discretion. “Lifetime access” means the operational lifetime of the Cyber Beacon Platform, not the lifetime of the Customer or any individual. Cyber Beacon Pty Ltd reserves the right to discontinue the Platform with not less than 90 days’ written notice to active members. In the event of discontinuation, Cyber Beacon Pty Ltd will make the Materials available for download in a commonly used digital format for a period of not less than 30 days following the notice.
3.3 Restrictions
The Customer must not:
- Resell, redistribute, sublicence, or make the Materials available to any third party, whether for commercial gain or otherwise.
- Share login credentials with individuals or entities outside the Customer’s organisation.
- Reproduce, republish, or create derivative works based on the Materials for distribution, sale, or public availability.
- Remove, alter, or obscure any copyright notices, branding, or attribution within the Materials.
- Use the Materials to provide consulting, advisory, or managed services to third parties (i.e., the Customer must not use the Materials to deliver services to the Customer’s own clients).
Cyber Beacon Pty Ltd may suspend or terminate the Customer’s access for breach of this clause, in accordance with clause 13.
4. Intellectual Property
All intellectual property rights in the Materials, including but not limited to copyright, trade marks, and design rights, remain the exclusive property of Cyber Beacon Pty Ltd. Nothing in these Terms transfers ownership of any intellectual property to the Customer. The Customer’s licence is limited to the rights expressly granted in clause 3.
Where the Materials include third-party content (e.g., references to Microsoft, Google, Apple, or ACSC documentation), such content is used under fair dealing or with appropriate attribution and remains the property of the respective rights holders.
5. Payment and Pricing
5.1 Pricing
The Package is sold as a one-time payment at the price published on the Platform at the time of purchase. All prices are in Australian dollars and are inclusive of GST unless otherwise stated.
5.2 Payment Processing
Payment is processed via Stripe. Cyber Beacon Pty Ltd does not store credit card details. All payment processing is subject to Stripe’s terms of service and privacy policy.
5.3 GST
All prices are in Australian dollars. If GST is applicable, it will be included in or added to the price displayed on the Platform, and a valid tax invoice will be provided in accordance with the A New Tax System (Goods and Services Tax) Act 1999 (Cth).
6. Consumer Guarantees and Refunds
6.1 Australian Consumer Law
The Customer may have rights under the Australian Consumer Law (Schedule 2, Competition and Consumer Act 2010 (Cth)) that cannot be excluded, restricted, or modified by agreement (“Consumer Guarantees”). Nothing in these Terms excludes, restricts, or modifies any Consumer Guarantee. If the Materials fail to comply with a Consumer Guarantee, the Customer’s remedy will be determined in accordance with the Australian Consumer Law.
6.2 Refund Policy
Given the digital nature of the Package and that access to the Materials is provided immediately upon payment, refunds are generally not available once the Customer has accessed the Materials. However:
- If the Customer has not accessed any Materials and requests a refund within 14 days of purchase, Cyber Beacon Pty Ltd will provide a full refund.
- If the Materials contain a material defect or are substantially different from what was described on the Platform at the time of purchase, the Customer may request a refund or re-supply in accordance with the Consumer Guarantees.
- Refund requests must be submitted in writing to [email protected].
This refund policy does not limit or override any rights the Customer has under the Australian Consumer Law.
7. Disclaimers and Limitations
7.1 General Information Only
The Materials are provided as general guidance to assist businesses in working toward alignment with the ACSC Essential Eight Maturity Level 1. The Materials do not constitute:
- Professional advice (including legal, IT, security, or compliance advice) tailored to the Customer’s specific circumstances.
- A security assessment, audit, assurance opinion, or certification of any kind.
- A guarantee or representation that following the Materials will result in compliance with the Essential Eight, any other standard, or any regulatory requirement.
- A guarantee or representation that following the Materials will prevent cyber-attacks, data breaches, ransomware incidents, or any other security event.
The Customer acknowledges that cyber security is an evolving field. The effectiveness of the Materials depends on numerous factors outside Cyber Beacon Pty Ltd’s control, including the Customer’s specific IT environment, the accuracy and completeness of the Customer’s implementation, changes to third-party platforms (e.g., Microsoft, Google, Apple), and the evolving threat landscape.
7.2 No Compliance Certification
The Materials reference the ACSC Essential Eight Maturity Level 1 requirements and use terms such as “compliance,” “compliant,” and “ML1 requirements” throughout. These references describe alignment with the relevant ACSC requirements and do not constitute a formal compliance determination, certification, attestation, or assurance opinion. An independent assessment by a qualified assessor is required to formally determine maturity level attainment.
7.3 Third-Party Platforms
The Materials contain instructions and screenshots referencing third-party platforms including Microsoft 365, Google Workspace, Apple, and others. These platforms may change their interfaces, features, settings, or policies at any time without notice to Cyber Beacon Pty Ltd. Cyber Beacon Pty Ltd makes reasonable efforts to keep the Materials current but does not guarantee that all instructions or screenshots will reflect the current state of any third-party platform at the time of use.
7.4 Validation Scripts
The Package includes PowerShell and other validation scripts provided as tools to assist the Customer. These scripts are provided “as is” and must be reviewed and tested by the Customer in a non-production environment before use. Cyber Beacon Pty Ltd is not responsible for any adverse impact resulting from the execution of scripts in the Customer’s environment. The Customer is solely responsible for ensuring scripts are appropriate for their environment before execution.
7.5 Policy Templates
Policy templates included in the Package are starting points that must be customised by the Customer to reflect their specific business operations, risk appetite, and legal obligations. The templates do not constitute legal advice and should be reviewed by the Customer’s legal adviser before adoption.
7.6 Customer Responsibility
The Customer is solely responsible for:
- Determining whether the Essential Eight Maturity Level 1 is an appropriate standard for their business, industry, and regulatory obligations.
- The accuracy and completeness of any implementation undertaken using the Materials.
- Maintaining backups of their systems and data before making any configuration changes.
- Obtaining independent professional advice where their circumstances require it (e.g., regulated industries, Privacy Act obligations, SOCI Act obligations, Cyber Security Act 2024 (Cth) obligations).
- Testing all configuration changes in a suitable environment before deploying to production.
8. Limitation of Liability
8.1 Exclusion of Consequential Loss
To the maximum extent permitted by Australian law, including the Australian Consumer Law, Cyber Beacon Pty Ltd excludes all liability for indirect or consequential loss, including but not limited to loss of profits, loss of revenue, loss of data, business interruption, reputational damage, or costs of procuring substitute services, arising out of or in connection with the use of the Package.
8.2 Liability Cap
Subject to clause 6.1 (Consumer Guarantees), Cyber Beacon Pty Ltd’s total aggregate liability to the Customer for any claim arising out of or in connection with the Package (whether in contract, tort, negligence, or otherwise) is limited to the amount paid by the Customer for the Package.
8.3 No Liability for Implementation Outcomes
Cyber Beacon Pty Ltd is not liable for any loss, damage, or adverse outcome arising from the Customer’s implementation of the Materials, including but not limited to system outages, data loss, configuration errors, application compatibility issues, or user workflow disruption. The Customer implements the Materials entirely at their own risk.
9. Privacy
Cyber Beacon Pty Ltd collects and processes personal information in connection with the Package in accordance with the Privacy Act 1988 (Cth) and our Privacy Policy. Personal information collected includes the Customer’s name, email address, business name, and payment details (processed by Stripe). Cyber Beacon Pty Ltd does not access, collect, or store any information about the Customer’s IT environment or systems through the Package.
10. Account Security
The Customer is responsible for maintaining the confidentiality of their Platform login credentials. The Customer must notify Cyber Beacon Pty Ltd promptly if they become aware of any unauthorised access to their account. Cyber Beacon Pty Ltd is not liable for any loss or damage arising from the Customer’s failure to protect their login credentials.
11. Optional DIY Check-In
The Customer may separately purchase a 30-minute video consultation (“DIY Check-In”) with a Cyber Beacon Pty Ltd consultant. The following terms apply to the DIY Check-In:
- The DIY Check-In is a general guidance session only. It is not a security review, audit, assessment, or assurance engagement.
- Advice provided during the DIY Check-In is based on information provided by the Customer during the session and the consultant’s professional judgement at the time. It does not constitute a comprehensive review of the Customer’s IT environment.
- The DIY Check-In must be used within 90 days of purchase. Unused sessions are non-refundable after this period unless otherwise agreed in writing.
- Cyber Beacon Pty Ltd’s liability in respect of the DIY Check-In is limited to the fee paid for the DIY Check-In and is subject to the same disclaimers and limitations set out in clauses 7 and 8.
- Sessions are conducted via video call at a mutually agreed time. Cyber Beacon Pty Ltd will make reasonable efforts to accommodate the Customer’s scheduling preferences.
- Sessions may be recorded by Cyber Beacon Pty Ltd for quality assurance purposes. If the Customer wishes to record the session, they must obtain Cyber Beacon Pty Ltd’s prior consent. Queensland surveillance laws (Invasion of Privacy Act 1971 (Qld)) require all parties to consent to the recording of private conversations.
12. Updates and Changes
12.1 Materials Updates
Cyber Beacon Pty Ltd may update, revise, or supplement the Materials from time to time at its discretion. Updates may include new content, corrections, platform-specific changes, or removal of outdated content. Cyber Beacon Pty Ltd does not guarantee any particular update frequency or that updates will be provided for any specific third-party platform change.
12.2 Changes to Terms
Cyber Beacon Pty Ltd may update these Terms from time to time. Material changes will be communicated to the Customer via email to the address associated with their Platform account. Continued use of the Materials after notification of a change constitutes acceptance of the updated Terms. If the Customer does not agree with any material change, they may request cancellation of their account in accordance with clause 13.
13. Termination and Suspension
13.1 Termination by Customer
The Customer may terminate their access at any time by written request to [email protected]. Termination does not entitle the Customer to a refund unless required by the Australian Consumer Law.
13.2 Termination or Suspension by Cyber Beacon Pty Ltd
Cyber Beacon Pty Ltd may suspend or terminate the Customer’s access if the Customer:
- Breaches clause 3.3 (licence restrictions), including sharing credentials, redistributing Materials, or using the Materials to provide services to third parties.
- Engages in conduct that is fraudulent, unlawful, or likely to bring Cyber Beacon Pty Ltd into disrepute.
- Fails to pay any amounts owing.
Cyber Beacon Pty Ltd will provide written notice of suspension or termination, and where practicable, an opportunity to remedy the breach within 14 days before termination takes effect. This clause does not apply where immediate termination is necessary to prevent ongoing harm (e.g., active redistribution of Materials).
13.3 Effect of Termination
Upon termination, the Customer’s access to the Platform and Materials will cease. Clauses that by their nature should survive termination (including clauses 4, 7, 8, and 9) will continue in full force.
14. Dispute Resolution
In the event of a dispute arising out of or in connection with these Terms, the parties agree to the following process before initiating legal proceedings:
- Written Notice: The party claiming a dispute must provide written notice to the other party specifying the nature of the dispute.
- Good Faith Negotiation: The parties must attempt to resolve the dispute through good faith negotiation within 14 days of the written notice.
- Mediation: If unresolved, either party may refer the dispute to mediation with a mediator agreed upon by the parties, or as appointed by the Queensland Law Society. Costs of mediation are shared equally.
- Litigation: If mediation fails or is not agreed within 14 days of referral, either party may pursue their rights through the courts of Queensland.
15. General
15.1 Governing Law
These Terms are governed by the laws of Queensland, Australia. The parties submit to the non-exclusive jurisdiction of the courts of Queensland.
15.2 Entire Agreement
These Terms constitute the entire agreement between the parties in relation to the Package and supersede all prior discussions, representations, understandings, and agreements (whether written or oral). Nothing in this clause excludes liability for fraudulent misrepresentation.
15.3 Severability
If any provision of these Terms is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision will be severed and the remaining provisions will continue in full force and effect. Where possible, the invalid provision will be read down to the extent necessary to make it valid and enforceable.
15.4 Notices
Any notice required under these Terms must be in writing and delivered by email. Notices to Cyber Beacon Pty Ltd must be sent to [email protected]. Notices to the Customer will be sent to the email address associated with their Platform account.
15.5 Assignment
The Customer may not assign or transfer their rights under these Terms without Cyber Beacon Pty Ltd’s prior written consent. Cyber Beacon Pty Ltd may assign these Terms in connection with a sale, merger, or restructure of its business, provided the assignee assumes all obligations under these Terms.
15.6 Waiver
A failure by either party to enforce any provision of these Terms does not constitute a waiver of that party’s rights under that provision or any other provision.
15.7 Force Majeure
Neither party will be liable for any delay or failure to perform their obligations under these Terms to the extent that such delay or failure is caused by circumstances beyond their reasonable control, including but not limited to acts of God, platform or service outages by