Skip to main content

Four services. One senior bench.

Govern implements ISO 27001. Internal Audit runs the independent Clause 9.2 audit. Harden locks down Microsoft 365 — email security, Conditional Access, Purview and sensitivity labels. On-Demand IT is an Australian-based team on subscription. Every engagement is delivered by the same NV1-cleared engineers inside your tenant.

Aegentra runs four practices from one senior bench: Govern (management systems and certification), Internal audit, Harden (Microsoft 365 security), and On-Demand IT. The same engineers work across all four, which is why a control hardened in your tenant becomes evidence in your ISMS rather than a separate project.

The four practices

  • Govern — governance, risk and compliance. ISO 27001, ISO 42001, ISO 27701, SOC 2 and SOX readiness, built inside your Microsoft 365 tenant and handed to a JAS-ANZ-accredited certification body.
  • Internal audit — independent Clause 9.2 audits for a management system someone else built. Clause 9.2 requires auditors independent of the work audited, which is what a certification body checks.
  • Harden — Microsoft 365 security hardening against the ACSC Essential Eight. Conditional Access, Intune, Purview and Defender, configured rather than recommended.
  • On-Demand IT — senior engineering support without a managed-service contract, for organisations that need specialist depth occasionally rather than a help desk permanently.

How Aegentra works

  • Senior engineers only. The person who scopes the engagement is the person who delivers it. No offshore hand-offs and no junior rotation.
  • Fixed scope, fixed price. Agreed after a discovery pass, so the engagement does not run on an hourly meter.
  • Inside your tenant. Management systems are built from your real configuration, so the evidence is generated by the system rather than written up afterwards.
  • Australian context. The Essential Eight, the Privacy Act and the APPs, APRA CPS 234 and CPS 230, and JAS-ANZ accreditation are the ground the work is mapped onto.

Training as well as services

Aegentra Academy is an official PECB authorised training partner, running Foundation, Lead Implementer and Lead Auditor certification across the ISO management system standards. Organisations certifying with Govern commonly put their own quality or security owner through Lead Implementer first — the readiness work goes faster and the audit goes cleaner.

Aegentra is the trading name of Hans Division Group Pty Ltd, based in Melbourne and serving Australia and New Zealand. More at about Aegentra.