Practical reading for people responsible for technology in a business, school or community organisation. I’m Nick O’Sullivan, a Townsville-based IT consultant. Here I bring together advice, regional research and reporting on cyber incidents.

Where would you like to start?

• Improve your organisation’s security: start with practical steps for small teams.
• Understand local incidents: explore the regional incident tracker.
• Get help with your own systems: see my consulting services.

Start with your region

Each guide looks at the people, industries, training and public evidence behind cyber security in that region.

• Townsville: training, jobs, businesses and what is missing — the existing local landscape, the coordination gap and where to find help.
• Cairns and Far North Queensland — customer information, tourism and service businesses, the Westco Motors claim and local training infrastructure.
• Mackay — sugar, mining services, supplier access and the consequences of operational downtime.
• Rockhampton and Central Queensland — regional services, agriculture, health and education, with a closer look at building local capability.

North Queensland Cyber Watch

I started Cyber Watch to turn regional incidents into useful questions for other organisations. What is confirmed? What is still alleged? Which dependency or decision deserves a closer look in our own environment?

The Regional Queensland Cyber Security Incident Tracker brings the entries together with dates, locations, source links and evidence labels. It distinguishes incidents at regional organisations from national platform incidents that may affect people here. It is a record of the reporting collected on this site, not a census of every attack.

You can also read the full Cyber Watch series.

Practical resources for organisations

• Practical cyber security for small organisations starts with changes a small team can understand and maintain.
• The CIA Triad explains confidentiality, integrity and availability, including why an outage matters even when no data is reported stolen.
• Identity and access management looks at who can reach your information and systems.
• Beyond the Essential Eight: cybersecurity governance for Australian schools connects technical controls to purpose, ownership and investment decisions.
• School cyber audits and managed security examines what different forms of assurance actually tell a school.
• Can They Email As Me? explains the email authentication tool I built and the limits of what a public check can establish.

For an active incident, start with ASD’s reporting and assistance channels. For personal identity and cyber support, IDCARE provides assistance. An article or a website check cannot investigate your own environment.

Careers, training and regional capability

My North Queensland cyber security jobs research for 2025–26 examines advertised roles and the wider IT work that carries security responsibility. The October Townsville careers update adds local examples; it is a dated report, so check the original listing before treating a role as open.

The Townsville cyber security hub history asks what became of a publicly announced regional initiative. That question still matters: individual training courses and job advertisements don’t automatically add up to a supported regional career pathway.

The experience behind the writing

My background spans more than 17 years in IT, including small business, education and community organisations. About me explains that experience; my skills and qualifications provide the technical detail. For an interview or event biography, see media and commentary.

Research and consulting

I also provide cyber security and IT consulting in Townsville and North Queensland through Suburban Australia and Suburban Secure. That commercial interest is relevant when I write about the local market. This site holds my own research and commentary; Suburban Secure explains the business services.

Corrections and useful public sources are welcome through my contact page. The aim is to make regional cyber security easier to understand, including the gaps in what we know.