Senior-led and direct by design
Next Cyber is an Australian managed IT and cyber security firm working from Sydney and Canberra, and travelling nationally. We are senior-led, we grow at the pace our clients grow, and we are direct about what we find.
A monthly report should match the environment it describes
We have spent our careers inside Australian managed service providers, vendors and enterprise IT teams. Long enough to notice a pattern that lives in the reporting far more than the engineering.
Reporting drifts towards reassurance, usually through accumulation. A red item is explained. A metric is presented in a way that reads better. A known exception stops being mentioned because everyone already knows about it. Eighteen months later the monthly report is green and the environment underneath it is red.
We built Next Cyber around a narrower promise: the report is accurate even when the news is bad, especially when the bad news is ours. Response times we missed, failed restore tests and incidents we could have prevented go in the report. It costs us occasional uncomfortable meetings and it is the only version of this business worth running.
Six positions we will argue for
Positions we hold and work by, even when they occasionally cost us work.
- Boring beats clever
Patching, backups, MFA and asset inventory prevent more incidents than any product with a threat map on the dashboard. We do the unglamorous work properly first, and the interesting work after.
- Configuration beats procurement
Most organisations already own the licences they need. We finish configuring what you have before we quote you for anything new. It is a worse opening sales move and a better opening engagement.
- Evidence beats assurance
A backup that has never been restored is a claim. A control nobody has exported evidence for is an intention. Anything we tell you is true, we should be able to demonstrate.
- Cleared people where clearance is the requirement
Some environments restrict who can work on them. We maintain security cleared personnel for engagements in government, defence-adjacent and regulated settings, and we will say plainly when a piece of work needs one and we cannot staff it.
- Accountability requires a name
Split responsibility means work that falls between providers. One agreement, one escalation path, one person whose problem it is — including at 2am.
- Leaving should be easy
Tenants and licences in your name, documentation exported on request, exit assistance priced before you sign. A provider who makes leaving difficult has stopped competing on the work.
Bryan Lam
Founder & Managing Director · CISSP, CISM, MCT · MACS CT, MAISA
Bryan’s career in IT began at sixteen, as the youngest trainee accepted into the inaugural Microsoft Traineeship Program in Australia. He has since spent a decade inside some of the country’s most established managed service providers, including Nexon Asia Pacific and XCentral, leading technical teams and delivering complex projects across government and enterprise. He is now a Microsoft Certified Trainer.
His deepest specialisation is enterprise mobility. As former Professional Services Lead at Ivanti — a global vendor in unified endpoint and mobile device management — he delivered endpoint and MDM programs into highly sensitive environments, including fleets operating well beyond the reach of a help desk.
He founded Next Cyber to build the kind of provider he spent ten years wishing he could point clients at: senior people, honest reporting, and an engagement model that starts by counting what is actually there.
Bryan works across both offices, alongside the team who run client environments day to day.
Senior by design
Most providers grow by putting progressively less experienced people in front of clients. We built the practice the other way round: the person who scopes your work is the person accountable for it, whether you are a small business, an SME, mid-market or an enterprise.
2
Offices — Sydney NSW and Canberra ACT, travelling nationally
10+
Years of Australian managed services and vendor-side experience behind the practice
24/7
Monitoring and response coverage, including public holidays
100%
Australian owned, Australian staffed, data held onshore
Sydney and Canberra, on the ground
Remote support handles most of it. A cutover weekend, a site survey, an incident or a board meeting needs someone in the room.
Have a conversation before you have a proposal
Thirty minutes and a straight answer on whether we are the right fit for what you are dealing with.