Australian cybersecurity governance + professional training
ISO systems, implemented.
PECB training, official.
Aegentra implements ISO/IEC 27001 and ISO/IEC 42001 management systems, runs independent internal audits, and delivers official PECB courses through Aegentra Academy. Aegentra Labs gives certification candidates a separate place to practise for the exam.
Consulting and managed IT are delivered remotely across Australia — every state and territory — plus New Zealand, and Asia Pacific for compliance work. Aegentra Academy courses are available worldwide, with classroom delivery in Melbourne and Sydney by arrangement.
Aegentra delivers the training; PECB supplies the official materials and examination and awards eligible professional credentials. Organisation certification is issued by an independent accredited certification body.
/ Our Capabilities
Consulting, training and exam preparation.
Organisations engage Aegentra to build and audit management systems. Professionals use Aegentra Academy for official training. Exam candidates practise separately in Aegentra Labs.
Internal audit and controls assurance
Independent testing for three programmes.
We sample operating evidence, document findings and support corrective-action close-out. Certification and external attestation remain with the relevant independent external body.
ISO/IEC 27001
ISO 27001 internal audit
Independent Clause 9.2 audit for an ISMS implemented in-house or by another consultant.
Clause 9.2 · ISMSISO/IEC 42001
ISO 42001 internal audit
Independent Clause 9.2 audit for an AIMS implemented in-house or by another consultant.
Clause 9.2 · AIMSSOX 404
SOX ITGC testing
Independent or co-sourced testing across access, change, development and computer operations.
ITGC · Management testing/ The Aegentra Standard
Uncompromising security engineering for highly-regulated environments.
Three non-negotiables behind every Aegentra engagement.
Identity
Zero Trust Architecture
The identity is the perimeter. Every sign-in verified, every device known, nothing implicit.
Evidence
Continuous Compliance
Evidenced directly from the tenant: live control state, not last quarter’s screenshots.
Sovereignty
Cleared Engineers
Engineers with experience implementing ISO 27001 and Essential Eight controls in government and regulated environments.
/ Aegentra Academy
Master the standards that
govern the industry.
Aegentra Academy delivers official PECB training for professionals worldwide across ISO 27001, ISO 42001, privacy, risk, SOC 2, AI governance and hands-on cybersecurity. PECB supplies the official material and examination, then awards the applicable professional credential when its requirements are met. Aegentra handles enrolment, delivery options and learner support as an official authorised training partner.
/ Insights
Written by the engineers.
Practical Microsoft 365 security, ISO 27001 and IT-operations guidance for Australian SMEs — the same advice we give clients.
All insightsMulti-standard programs
Integrated management systems: running ISO 27001, 9001, 14001 and 45001 as one
Choosing a framework
SOC 2 vs ISO 27001: which one does your buyer actually want?
AI assurance careers
How to become an ISO 42001 Lead Auditor in Australia
AI governance careers
How to become an ISO 42001 Lead Implementer in Australia
SOX & ITGC
SOX compliance in Australia: a guide for subsidiaries of US-listed parents
Aegentra delivers ISO 27001 readiness and GRC through a scope-led implementation plan, ISO 42001 AI governance for the AI you run, SOX ITGC readiness for US-listed groups, independent ISO 27001 internal audits for companies that implemented elsewhere, Microsoft 365 hardening in 4–6 weeks — and you can outsource your IT month-to-month with our On-Demand IT service — all powered by the Aeges risk engine. Training available through Aegentra Academy.
Certifying your organisation and certifying yourself are different things. The ISO 27001 certification guide for Australia covers the process, the real costs in AUD and what a JAS-ANZ-accredited certification body actually audits, and the Academy library holds 40 free worked templates — statements of applicability, risk registers, internal audit checklists. SaaS companies selling into the United States often need SOC 2 readiness before ISO 27001. See all four practices, the questions we are asked most, and who actually does the work.
Twelve weeks from kickoff to audit-ready for a typical 10–50 person firm on Microsoft 365 — fixed scope, fixed price. We quote the number on the discovery call before you sign anything. Multi-tenant M365, on-premise systems, or regulated workloads add 4–8 weeks; we say so up front.
Let's talk.
Schedule a high-level technical consultation with a senior engineer. We evaluate your current posture and define a precise, actionable roadmap.