ISO 27001 certified
for Modern Work
Location-based access
We set trusted locations with named locations and IP checks, and block or challenge sign-ins from unexpected countries. Our travelling user automation flags impossible travel. See what staff see when they are blocked overseas.
Device compliance
Intune compliance policies check encryption, operating system updates and security settings before a device is allowed in.
Risk-based policies
Entra ID Protection scores each sign-in in real time using Microsoft’s threat intelligence. A high-risk sign-in triggers a multi-factor challenge or a block.
App protection
Intune App Protection Policies control which apps can open company data on personal devices, and stop it being copied into apps you do not manage.
Privileged access
Just-in-time admin access through Privileged Identity Management. Admin roles are switched on only when needed, for a set time, and every use is audited.
Legacy authentication
Older sign-in protocols that bypass multi-factor sign-in are blocked. Our Exchange Best Practice automation enforces this for every business we manage.
That is why we enforce multi-factor sign-in with Conditional Access, rather than leaving it optional. See the chart and sources on our Microsoft 365 security page.
“Dan from GCIT was all over it and had it enabled in minutes.”
When a Southpac team member’s international travel plans changed at the last minute, we had their access reconfigured in minutes. Southpac has worked with us for more than 10 years.
As at October 2026
The Gold Coast’s highest-rated MSP on Google. 166 reviews, more than any other Gold Coast managed IT provider rated 5.0.
Reviewed by Elliot Munro, CISO at GCIT.
