AI deepfakes, email security risks, and the single action to take tomorrow

In this extended final episode of our Cyber Resilience series, Aron Robertson answers real questions from business owners just like you. 

From AI-powered deepfakes to managing employee mobile devices, from understanding the Notifiable Data Breach scheme to the uncomfortable truth about email security, this Q&A session covers the practical concerns and tough questions that keep business owners up at night. Aron provides honest, detailed answers that cut through the confusion and give you clear next steps.

Questions answered in this episode:

• AI and emerging threats: How is AI making attacks more sophisticated? (Voice impersonation, deepfakes, and what's coming in 2026)
• Device management: Should we require phones and tablets to be managed corporate devices? (Risk assessment framework)
• Notifiable Data Breach scheme explained: What triggers a reportable breach? Who do you notify? What is the "harm" test?
• ISO 27001 certification: Will it soon be required for professional services firms? (Spoiler: It's already happening in government tenders)
• The first action to take tomorrow: What's the single most important step to strengthen your defences?
• Email security reality check: How unsecure is email really? Should you avoid sending personal data via email?
• Supply chain risk: Why your client's poor security becomes your problem
• Building a safety culture: How to create an environment where employees report suspicious activity without fear
• Token theft attacks: The emerging threat that bypasses MFA
• Ransomware evolution: New "double extortion" tactics—stealing data before encrypting it
• Social engineering in the AI era: Why verbal confirmation isn't foolproof anymore

Key Takeaway: The human element—building a culture where your team understands their value to attackers and feels safe reporting concerns—is your most powerful defense, even as technology evolves.

Featured Expert: Aron Robertson, Chief Commercial Officer, Strategic Group

Part of The Cyber Security Series: Episode 4 of 4

Less Than 15 is a show brought to you by leading Accountants and Business Advisors, DFK Australia New Zealand.

We help business owners make better decisions with our local knowledge, national connections and global reach.

Search for a firm here and have a conversation with us today! 

Beyond technology: insurance coverage, business continuity, and compliance explained

Now that you understand the threats and how attacks unfold, it's time to build your defences. In this comprehensive episode, Aron Robertson shares the essential strategies every business should implement - from multi-factor authentication to endpoint detection, from incident response planning to business continuity frameworks. 

But protection isn't just about technology. Aron also explains the critical role of cyber insurance (what it actually covers and when to engage your insurer) and the governance frameworks that are increasingly becoming requirements for professional services firms, not just enterprises.

In this episode, you'll discover:

Defence Strategies:

• Core resilience tactics every business needs (beyond basic MFA)
• Why endpoint detection and response (EDR) is replacing traditional antivirus
• The critical importance of incident response planning before disaster strikes
• Access control: understanding who has access to what (files, email lists, systems)
• Why security training and email hygiene are your strongest defences
• The four phases of business continuity planning: assessment, recovery, finalisation, testing
• Business impact analysis: mapping every system to understand cascading failures
• Why your disaster recovery plan is "just paper" until you test it

Cyber Insurance:

• Why cyber insurance is now essential, not optional
• First-party coverage: crisis management, data recovery, business interruption
• Understanding data extortion and ransom payment regulations
• Third-party coverage: regulatory costs, multimedia liability, security liability
• When to engage your insurer (earlier than you likely think)

Governance & Compliance:

• Essential Eight maturity model explained
• ISO 27001: why it's coming to SMEs, not just software companies
• How compliance requirements are becoming client tender requirements
• Other frameworks: NIST, SOC 2, and what they mean for professional services

Key Takeaway: Effective cyber resilience requires three pillars: technical defences, financial protection through insurance, and governance frameworks that prove your due diligence.

Featured Expert: Aron Robertson, Chief Commercial Officer, Strategic Group

Part of The Cyber Security Series: Episode 3 of 4

Less Than 15 is a show brought to you by leading Accountants and Business Advisors, DFK Australia New Zealand.

We help business owners make better decisions with our local knowledge, national connections and global reach.

Search for a firm here and have a conversation with us today! 

From reconnaissance to encryption - how criminals execute attacks in real time

In this episode, Aron Robertson walks through the complete lifecycle of a cyber attack - from reconnaissance to exploitation to execution - then reveals four real-world scenarios that are hitting Australian businesses right now. From business email compromise to ransomware, these aren't hypothetical threats. These are the most commonly reported incidents affecting organisations just like yours, and Aron explains exactly how they unfold.

In this episode, you'll learn:

• The three-phase attack lifecycle: reconnaissance, exploitation, and execution
• Why attacks are methodical processes, not random events
• Scenario 1: Business email compromise - how attackers impersonate trusted clients to redirect payments
• Scenario 2: The insider threat - how one clicked malicious link can expose your business for months
• Scenario 3: Identity theft through credential stealing and MFA fatigue attacks
• Scenario 4: Ransomware - what really happens when attackers encrypt your systems in under an hour
• Why multi-factor authentication (MFA) is NOT a silver bullet
• How modern malware uses AI to constantly change and evade detection
• The behavioural signals and "tradecraft" that reveal an attack is underway
• Why unmanaged home devices create dangerous vulnerabilities
• Password reset timing: how attackers exploit the window before you change credentials

Key Takeaway: Understanding how attacks actually work - step by step - is essential to recognising the warning signs and implementing effective defences.

Featured Expert: Aron Robertson, Chief Commercial Officer, Strategic Group

Part of The Cyber Security Series: Episode 2 of 4

Less Than 15 is a show brought to you by leading Accountants and Business Advisors, DFK Australia New Zealand.

We help business owners make better decisions with our local knowledge, national connections and global reach.

Search for a firm here and have a conversation with us today! 

Welcome to the first episode of our Cyber Security series with Aaron Robertson, Chief Commercial Officer at Strategic Group. In this episode, we unpack the sobering reality of today's cyber threat landscape. With attacks costing Australian businesses more than ever before—and large enterprises seeing costs double in just one year - no organisation is too small to be a target. Aaron reveals the latest data from the Australian Signals Directorate and explains why the human factor, not technology failure, is behind 70% of breaches.

In this episode, you'll discover:

• Latest Australian cyber threat statistics: why incidents are at record levels
• The real cost of cyber attacks for SMEs versus large businesses (and why it's doubled)
• The human factor: why 70% of breaches aren't caused by system failures
• Who's really behind cyber attacks (it's not teenagers in hoodies)
• The sophisticated business model of modern cybercrime organisations
• How attackers use AI and "crime-as-a-service" to scale their operations
• Dark web job postings: how criminal enterprises recruit and operate
• The reconnaissance phase: what attackers learn about your business before they strike
• Why publicly available information (LinkedIn, websites) is weaponised against you

Key Takeaway: Cyber attacks aren't random events—they're methodical, business-like operations. Understanding how attackers think is your first step toward protection.

Featured Expert: Aron Robertson, Chief Commercial Officer, Strategic Group

Episode 2 drops tomorrow: Anatomy of an Attack.

Less Than 15 is a show brought to you by leading Accountants and Business Advisors, DFK Australia New Zealand.

We help business owners make better decisions with our local knowledge, national connections and global reach.

Search for a firm here and have a conversation with us today! 

Season 2 of Less Than 15 was packed with sharp, actionable insights from across the DFK Australia New Zealand network, and our brilliant guests. In this finale episode, our host Angela Raspass recaps each episode and pulls out key takeaways you can use straight away.

From workplace culture to cashflow, AI to estate planning, this 10-episode season offers something for every business owner. If you missed a few along the way (or need a quick refresher), this wrap-up episode is the perfect place to start — or re-start — your listening.

💡 What we covered:

• Why psychosocial hazards aren’t just HR talk — they’re leadership essentials
• Three commandments for using AI without losing your brand voice
• How ESG can be a strategic tool, not a compliance headache
• The 30% task burden that’s holding you back — and how to shed it
• Why profit ≠ cash (and 5 fixes if your bank balance is hurting)
• Rethinking risk by starting with your people, not just your policies
• What business estate planning really means — and the docs you need
• The true pros and cons of self-managed super for business owners
• What marketing metrics matter (hint: it’s not likes or follows)
• The 3 big valuation myths that could derail your exit

✅ Your action step:

Scan the season titles and pick two episodes you didn’t listen to. Queue them up on your next commute, walk, or coffee break -  and follow the links on the podcast page to grab the expert resources mentioned in each.Guest Highlights:

This season featured insights from:

• Ep 11 – Wendy Jeffery-Lonnie (DFK Gooding Partners)
  Understanding psychosocial hazards in the workplace
• Ep 12 – Leanne Shelton (Human Edge AI Training)
  How to keep your AI on-brand and authentic
• Ep 13 – Chaitanya Mawji (DFK CIB)
  Why ESG matters for small business (and how to make it strategic)
• Ep 14 – Kristy Smith (Virtual Elves)
  The 30% task burden holding you back — and how to let it go
• Ep 15 – Mike McNab (DFK Oswin Griffiths Carlton)
  Profit ≠ Cash: Why your bank balance might be lying to you
• Ep 16 – Lisa Sisson (Unearth Consultancy)
  Risk starts and ends with people — not policies
• Ep 17 – Melissa Healy (DFK Everalls & Everalls Wealth)
  Estate planning for business owners: Who’s holding the fort?
• Ep 18 – Daniel Shaw (DFK Benjamin King Money)
  Is a self-managed super fund the right move for your business?
• Ep 19 – Leanne O’Sullivan (Adventure Digital)
  The digital blind spots in your marketing (and what to track instead)
• Ep 20 – Steven Tindale (DFK Gooding Partners)
  The 3 big valuation myths that could derail your exit

We look forward to welcoming you to our next client support initiatives. 

Less Than 15 is a show brought to you by leading Accountants and Business Advisors, DFK Australia New Zealand.

We help business owners make better decisions with our local knowledge, national connections and global reach.

Search for a firm here and have a conversation with us today! 

What many owners get wrong about timing, taxes and true value

If you think business valuation only matters when you're ready to sell, think again. This week, we speak with Steven Tindale, Partner at DFK Gooding Partners in Perth, about why getting an accurate business valuation well before a sale is one of the smartest strategic moves an owner can make.

Steven outlines the financial, strategic, and legal reasons to get a valuation early, and why waiting might cost you more than you think. From understanding your true market position to avoiding unexpected tax surprises and preparing for retirement or succession, this conversation offers many practical insights.

In this episode:

• When and why you really need a business valuation (it’s not just for sale time)
• Why your sale price may differ from your business valuation
• Common valuation misconceptions that catch business owners out
• The “silver handcuff” effect (and why you might not be able to walk away)
• Key financial and non-financial factors that influence value
• Actions you can take now to strengthen your valuation position

Ready to find out how sale-ready your business really is?

The Business Valuation Scorecard from DFK Gooding Partners takes just a minute to complete and gives you a clear snapshot of your business’s valuation risks and opportunities. It’s a smart first step before considering an official valuation—or even just starting the conversation.

About our guest:

Steven Tindale is a Partner with expertise in Business Services and Advisory at DFK Gooding Partners in Perth. With over 17 years of experience, Steven specialises in accounting, tax and advisory services and has a particular focus on business valuation, helping owners understand their value and maximise outcomes.

Less Than 15 is a show brought to you by leading Accountants and Business Advisors, DFK Australia New Zealand.

We help business owners make better decisions with our local knowledge, national connections and global reach.

Search for a firm here and have a conversation with us today! 

The smart way to measure what’s working in your online marketing

Most business owners invest time, energy, and budget in digital marketing—often without knowing what's actually working. In this energising episode, Leanne O’Sullivan from Adventure Digital joins us to reveal the blind spots many businesses have and how to uncover the metrics that matter. Spoiler: it’s not all about likes and follows.

We unpack the four key areas of digital marketing, explain how to utilise your existing data more effectively, and walk you through how to track your customer journey more clearly. Whether you’re marketing a service or a product, this episode will help you stop guessing and start making more informed, confident decisions.

What we cover:

• Why social media ≠ your whole digital marketing strategy
• The four key digital marketing areas you should focus on
• How to use UTM tracking and Google Analytics more effectively
• The real role of email marketing and what to pay attention to
• Why segmentation improves client retention and ROI
• What not to do before reviewing your data

Action Step:
Download the free Google Data Studio template from the podcast page and connect your website analytics. Begin benchmarking where your traffic, leads, and sales are actually coming from so you can do more of what works. Visit this link to access the resource.

Guest Bio:
Leanne O’Sullivan is the founder and CEO of Adventure Digital, a marketing agency based in regional NSW that helps purpose-driven businesses thrive online. Known for her no-nonsense approach, Leanne specialises in simplifying digital marketing and helping clients understand what really drives leads and conversions. She’s a passionate advocate for data-informed decisions and smart, sustainable growth.

Less Than 15 is a show brought to you by leading Accountants and Business Advisors, DFK Australia New Zealand.

We help business owners make better decisions with our local knowledge, national connections and global reach.

Search for a firm here and have a conversation with us today! 

What business owners need to know before managing their own super

For business owners, a self-managed super fund (SMSF) can offer flexibility, control, and some strategic benefits you might not have considered. But is it the right fit for you? In this episode, we chat with Daniel Shaw, Director and SMSF specialist at DFK Benjamin King Money in Melbourne, to explore when and why an SMSF might be a smart move—and the common traps to avoid.

Daniel explains the key benefits of SMSFs, who they’re best suited to, and the responsibilities that come with taking the DIY super path. If you’ve ever wondered whether you could (or should) rent your business premises from your own super fund, this one’s for you.

What we cover in this episode:

• What a self-managed super fund (SMSF) is and how it differs from industry funds
• Why SMSFs can suit business owners and when they’re not the right fit
• How SMSFs can hold and lease commercial property to your business
• Examples of surprising (but legal) SMSF investment options
• Common risks and misconceptions—and how to avoid costly mistakes
• Why early advice is essential, not optional

Action step:

Download our free checklist: The Lifecycle of a Self-Managed Super Fund and start thinking through whether this might be the right option for your business and retirement strategy. Then have a conversation with your accountant or licensed financial advisor.

Our Guest

Daniel Shaw is a Director at DFK Benjamin King Money in Melbourne and the firm’s in-house SMSF specialist. With deep experience in accounting, business strategy, and compliance, he helps clients utilise self-managed super funds strategically, balancing flexibility with smart risk management.

Less Than 15 is a show brought to you by leading Accountants and Business Advisors, DFK Australia New Zealand.

We help business owners make better decisions with our local knowledge, national connections and global reach.

Search for a firm here and have a conversation with us today! 

As a business owner, you’ve likely considered what happens to your personal assets when you’re no longer here, but what about your business? In this important episode, we speak with Melissa Healy, Senior Manager at DFK Everalls and Director of Everalls Wealth, to explore what estate planning looks like when your business is your biggest asset.

Melissa demystifies the complexities of estate planning beyond the personal will, explains the importance of enduring powers of attorney, and highlights the necessity of having a business continuity file. Whether you're a sole trader, part of a partnership, or operate through a trust, this conversation will help you take the steps to ensure your business is protected, no matter what happens.

In This Episode:

• Why estate planning for business owners is more than just having a will
• The role of enduring powers of attorney and company powers of attorney
• What to include in your In Case of Emergency file
• Key documents to review: partnership agreements, buy-sell agreements, shareholder agreements
• Steps to take now to safeguard your business and your family

Guest Bio.

Melissa Healy is an Accountant, business adviser, and financial planner at DFK Everalls in Canberra. She's passionate about helping build better businesses and financial futures.

Resource:

Download the Business Estate Planning Checklist here.

Less Than 15 is a show brought to you by leading Accountants and Business Advisors, DFK Australia New Zealand.

We help business owners make better decisions with our local knowledge, national connections and global reach.

Search for a firm here and have a conversation with us today! 

The benefits of People-centred Risk Management 

In this episode of Less Than 15, we speak with Lisa Sisson, author of Risk Starts and Ends with People and the founder of the Unearth consultancy.

We explore a refreshing take on risk management, one that prioritises people, not just policies. Lisa shares why the traditional ‘tick-the-box’ compliance approach is no longer sufficient, how disengagement is one of the greatest hidden risks in business, and what practical actions leaders can take to create safer and more innovative workplaces.

Whether you’re leading a team or flying solo, this episode is a must-listen for anyone ready to rethink how they identify, mitigate, and turn risks into opportunities.

In this episode, you'll learn:

• Why risk management starts with mindset, not checklists
• The connection between disengagement and increased exposure to risk
• How your people can become your strongest ‘risk sensors’
• The two types of risk every business faces
• What it takes to build a “safe zone” where people speak up early
• How to turn early warning signs into strategic advantage

Action Step:
Start by creating space for your team to speak up without fear. A simple first step: ask your people what risks they see and how the business could respond better.

Guest Bio:
Lisa Sisson is the author of Risk Starts and Ends with People and the founder of Unearth. She works with leaders and organisations to humanise their approach to risk management, helping them reduce exposure while enhancing engagement, culture, and performance. Use special code Lessthan15 for an exclusive discount on book purchases.

Less Than 15 is a show brought to you by leading Accountants and Business Advisors, DFK Australia New Zealand.

We help business owners make better decisions with our local knowledge, national connections and global reach.

Search for a firm here and have a conversation with us today!