AUSTRALIAN CYBERSECURITY & RISK ADVISORY Clarity. Control. Resilience.
RASPTECHNOLOGIES spider and silver web logo

POLICIES & ENGAGEMENT

Consulting Disclaimer

Scope, evidence and limits of cybersecurity advice.

Last updated 11 October 2026 · RASPTECHNOLOGIES · ABN 70 379 794 301

Advice depends on scope

A consultancy finding reflects the agreed systems, evidence, access, methods and assessment period. Findings can be limited by incomplete inventories, unavailable logs, exclusions and sampling. Reports should distinguish confirmed findings from assumptions and record material limitations.

Testing authorisation

Penetration tests and disruptive validation require written authorisation, confirmed asset ownership and rules of engagement. Approval from a client does not automatically authorise testing a third-party platform. Targets, testing windows, stop conditions, incident escalation and evidence handling must be agreed before work starts.

Implementation decisions

Recommendations require client review for business impact, dependencies, licensing and regulatory needs. Changes should be tested, backed up and approved with rollback plans. RASPTECHNOLOGIES does not assume authority to change production systems merely by providing advice.

Compliance and assurance

An Essential Eight review is an assessment against an agreed framework and evidence set, not ASD certification. Compliance depends on the organisation’s obligations and ongoing controls. Advice is not a legal opinion, audit opinion or regulator approval unless an appropriately qualified and expressly agreed service provides that outcome.

Availability and continuing responsibility

Monitoring hours, response targets, maintenance and ongoing reassessment exist only where agreed in writing. A completed assessment is a point-in-time review; the client retains operational decision-making responsibilities. Active incident support requires an agreed engagement and availability confirmation.

Professional care and rights

These scope limits do not excuse a failure to exercise the care required by the agreed services or applicable law. Statutory rights remain intact. Discuss reliance, intended recipients and any necessary clarification with [email protected] before using a report outside its agreed purpose.

Australian context: ACCC consumer guarantees and ACCC contract guidance. Sources checked 11 October 2026. Applicability depends on the transaction and organisation.

A CLEARER NEXT STEP

Start with the risk.
Build the right response.

Discuss your priorities ↗