Overview
As a venture capital firm, it’s Airtree’s mission is to find and invest in the best startup talent in Australia and New Zealand. With a large and diverse portfolio, their model doesn’t stop at funding. Airtree is in the business for the long haul, working with their portfolio companies to ensure growth throughout their business lifecycle.
Service Provided
- Essential 8 (Australian security and privacy framework)
Challenge
In early 2024, Airtree brought on Josh Condous as IT & Security Manager to strengthen its security and privacy posture. A few frameworks were being discussed, but due to its great foundation, achievable nature, and having security at the core of its practice, Condous and the team decided to undertake an audit for the Essential 8 framework.
While Airtree completed their first Essential 8 audit successfully, they wanted to work with an Australian audit team next time around. Enter Sensiba, who were referred to Airtree by their auditing platform, Vanta.
Sensiba stood out for several reasons. As a global company, they had teams in Airtree’s Australian time zones. They also offered a streamlined approach, fast response times, and expert knowledge of the Vanta platform.
“Sensiba were really knowledgeable in terms of the framework itself. They helped to narrow down the focus a little bit, whereas previously it was a much wider focus. The audit process with Sensiba was much more in-depth, which gave me the confidence that things were being done right.”
Josh CondousIT & Security Manager, Airtree
Solution
The onboarding process was made easy by the shared access to the Vanta platform. Sensiba also set up a Slack channel, which made it easier to communicate and reduced the risk of losing emails among the noise. “Overall, the onboarding process was smooth, frictionless, and fast,” Condus said.
Having gone through an Essential 8 audit meant Airtree already had the base requirements in place. This meant Sensiba was able to dive into each requirement and make sure it was applicable to Airtree.
With Sensiba’s expertise, Vanta integration, and real-time communication, Airtree experienced how a model audit should feel and obtained a complete audit ahead of the intended deadline.
Result
Having completed Essential 8, Airtree has reduced exposure to risk, as well as increased efficiency when going through investment due diligence processes and completing cyber questionnaires. Ultimately, Airtree has levelled up their core security functions.
Condous shared his words for other companies looking at Essential 8. “It’s a framework that’s achievable for most businesses. Even if you don’t have a lot of specialization within the business. It’s a good place to grow from because having those foundational elements in place allows you to do more things later. If you’re an Australian- based company, I think it’s good to have a contact you can share a time zone with.”
As Airtree looks to the future, it remains on track for its goal of building on its security posture and finding new businesses to invest in. The innovation space within Australia and New Zealand is booming with the rise of AI and Airtree is excited to help companies continue to grow within this space and beyond.
Ready to get started?
Find out how our GRC team can help you with your compliance. Contact us to learn more about how we can work together toward your goals.
Case Studies
Ready for more inspiration? Dive into additional client success stories where we showcase diverse projects, innovative solutions, and the transformative impact we’ve had on businesses like yours.
