Tech Insights with Alisha Christian

You can feel it everywhere right now: AI is on the agenda in every meeting, but most businesses are still stuck at “it wrote me a decent email”. We want to close that gap. We’ve just launched our AI website for Mercury IT, and we unpack what we actually mean when we say we can help organisations use AI in a practical, secure way without turning your data into a liability.

We dig into the difference between simple chatbot use (ChatGPT-style drafting and brainstorming) and AI workflow automation, where the real ROI shows up. Think repeatable work like reporting, pulling data from multiple systems, drafting summaries, and speeding up tedious admin. We also explain why we insist on proving tools internally first, so we’re not selling promises. What works in our business becomes a set of principles we can adapt to industries like legal, finance, dentistry, and professional services.

Security runs through everything. We talk about the real risks of free AI tools, over-sharing access to email and file stores, and business accounts that accidentally leave model training switched on. We walk through practical controls like access reviews, single sign-on (SSO) and MFA, and why a clear AI policy plus training beats a dusty 20-page document. Most importantly, we keep coming back to “expert in the loop”: if AI output goes out under your name, you own it.

If you’re curious about where AI could save time in your business, start by finding what’s frustrating and slow, then book a chat here. 

Subscribe for more Tech Insights, share this with your AI champion, and leave a review if it helped.

In this episode of Tech Insights, host Alisha Christian sits down with Mercury IT's Martin (General Manager and Head of Cybersecurity) and Andrew (Chief Operating Officer) to tackle the questions clients and prospects ask most.

They break down what actually separates a managed service provider from a basic help desk, what response times really look like in a crisis, and why remote-first support hasn't stopped Mercury IT from showing up on-site across the country. 

The conversation covers what's included in a managed services agreement, common cloud migration pitfalls, and — for anyone dreading the idea — just how painless switching IT providers can actually be. 

The back half dives into AI at work: practical advice for rolling it out safely, why the most successful implementations target a specific task rather than handing staff open-ended access, and how AI is reshaping both the defender's and the criminal's side of cybersecurity. 

Got a question about your IT that we didn't cover? Reach out to the Mercury IT team — we're always happy to chat. And if you found this useful, subscribe to Tech Insights so you don't miss our next episode.

Privacy risk is no longer just a "big business" problem. Alisha sits down with Chris Haigh to unpack the Australian Privacy Act changes pulling thousands of small and medium businesses into scope including reforms linked to anti-money laundering changes, and the growing expectation that every organisation knows exactly what personal data it holds and why.

We also cover what's coming around children's privacy protections and automated decision-making — and why the simplest first step is updating your privacy policy to reflect what you actually do, since regulators are now auditing policy against practice.

From there, we get tactical: the first hour after a breach, why panic causes expensive delays, and how tabletop exercises expose gaps before a real incident hits. We also look at why cyber insurance only helps if your declared security measures are genuinely in place, plus supply chain risk — the due diligence questions to ask suppliers, and what security certifications like ISO 27001 and SOC 2 actually tell you. 

If you found this useful, subscribe, share it with a business owner who needs it, and leave us a review.

Most of us have been managing passwords for decades, and most of us are still getting it wrong. In this episode, Alisha Christian sits down with Mercury IT's cybersecurity expert Chris to cut through the noise on one of the most overlooked areas of business security. 

They cover why password length now matters more than complexity, why your browser is the worst place to store credentials, and how to choose a password manager that actually works for your team. 

Chris also explains how MFA can be bypassed, including the real attack methods that have caught businesses off guard, and what phishing-resistant MFA like passkeys and hardware security keys looks like in practice. 

Whether you're a sole trader or managing a team of fifty, this episode is worth your time. 

Before the team of 50, before two ISO certifications, before two decades of client relationships — there were just two young guys in IT who believed they could do things better. And they had the courage to actually try.

In this episode, host Alisha Christian sits down with Mercury IT co-founder AJ to hear the story behind the company. AJ was 27 when he and business partner Luke, just 21 at the time, left the security of stable jobs and built something from scratch. It was a bold call at any age, let alone in their twenties. No safety net, no big client list — just a genuine belief that small businesses deserved better IT support than they were getting.

We go back to the early days: dial-up modems, on-site visits for every little issue, and paper job ticket books that tracked every call by hand. AJ talks about the mentors who guided them, the early clients who took a chance on two young operators, and the win that changed everything.

But the conversation isn't just about milestones. It's about the culture AJ and Luke built from day one — one where people come first, where staff have stayed for nearly 20 years, and where the founding belief still holds: good IT isn't really about technology. It's about service, trust, and showing up for the people who count on you.

A genuine story about backing yourself, building something that lasts, and never losing sight of why you started.

A single believable story can do more damage than a thousand dodgy emails. We sit down to untangle misinformation vs disinformation and why that difference matters when you’re trying to protect people, money and reputation. From clickbait headlines to “credible” reposts, we talk about how false information spreads across digital platforms in Australia, and why even well-meaning sharing can create real harm.

Then we get practical about cyber security. Think “phishing 2.0”: attackers soften the target with rumours, social proof and urgency, so the later link or attachment feels safe. We walk through scenarios like fake merger news, “highly confidential” PDFs that deliver malware, and the very real risk of deepfake video or audio being used to pressure finance teams into making transfers. We also dig into everyday traps like paid search ads that sit at the top of Google, QR codes that hand over account access, and AI-generated summaries that confidently repeat the same misinformation you were trying to fact-check.

The big takeaway is behavioural and process-driven: don’t trust by default, verify by design. We share clear steps like out-of-band confirmation, risk-based checks, and building a culture of healthy scepticism without turning work into a paranoia fest. 

If this helped, subscribe for more Tech Insights, share it with someone who approves payments or manages staff, and leave a review telling us what verification habit you’re adopting next.

How criminals are using AI to scale familiar fraud!

Think you can still spot a scam by bad grammar and odd phrasing? That edge is gone.

We sit down to map how AI has supercharged classic fraud—making phishing emails flawless, internal chat messages feel authentic, and even voicemails sound exactly like your CFO. The twist? These same tools can help you work smarter, if you build the right guardrails and culture around them.

We start with the modern account takeover, where compromised supplier inboxes deliver perfect‑looking document links that quietly steal credentials. From there, we break down mimicry and deepfakes: how a single headshot from a team page, plus a few seconds of public audio, can be turned into convincing video, full‑body movement from reference clips, and multilingual voice clones. This isn’t sci‑fi or enterprise‑only anymore—it’s affordable, fast, and good enough to fool busy teams.

We share pragmatic defences you can apply today: limiting staff photos to low resolution, locking down external access in Teams and Slack, and verifying unusual requests through a channel you initiate.

Culture sits at the centre of resilience. Urgency, authority, and secrecy are an attacker’s favourite levers—and they work best where questions are discouraged. We unpack zero trust in plain terms: verify the user, the device, and the context every time. And we explain why “healthy friction” beats speed when money or data is on the line.

We also cover safe AI adoption—using an AI readiness assessment to find blind spots, enforcing clear policies, and pressing vendors on encryption, data isolation, and model‑training practices to prevent accidental data leaks.

If you want concrete, real‑world steps—not fear—this conversation gives you a plan: broaden phishing awareness beyond email, harden default settings, train quarterly with fresh examples, and enforce dual control for sensitive actions. AI is a force multiplier on both sides. Use it to your advantage—without handing attackers the keys.

If this helped, follow the show, share it with your team, and leave a quick review so more people can find it.

AI can supercharge prospecting and polish your outreach, but it won’t replace the handshake that earns real trust. We sit down with Mercury IT’s Chief Sales Officer, Sally-Ann, to unpack how sales and marketing teams can move faster with ChatGPT, Copilot, and chatbots while keeping relationships at the centre of every deal.

We start with the practical wins: speeding up lead identification, drafting clearer emails under pressure, and using paid AI tiers to protect sensitive data. From there, we dig into what machines still miss. Sally-Ann explains why in-person meetings and live events outperform online calls, how a buzzing room lets you bring specialists into conversations on the spot, and why that depth builds confidence you simply can’t manufacture through a screen.

We also talk readiness. Many companies assume staff aren’t using AI when they already are. We share how to set policy, secure data, and train teams on ethics so AI enhances judgement instead of eroding trust. You’ll hear a rapid myth-versus-fact segment on chatbots, forecasting, and whether AI will replace sellers (spoiler: no), plus guidance on when to use automation for triage and when to switch to a human voice.

If you care about pipeline quality, realistic forecasts, and relationships that last beyond the signature, this conversation will help you balance efficiency with empathy. Subscribe, share with a colleague who lives in their CRM, and leave a review telling us: what part of your sales process should never be automated?

A landmark privacy ruling just raised the bar for every Australian organisation handling personal data. We walk through the Australian Clinical Labs case—from the Medlab acquisition and the rapid breach that followed to the court‑affirmed penalties—and spell out what “reasonable steps” now look like when sensitive health and financial records are involved. The lesson is not abstract: legacy systems, weak MFA, poor patching, and unencrypted data turned a containable incident into a costly, harmful event.

We share how ransomware evolved into double extortion, why backups are necessary but not sufficient, and how delayed investigation and notification magnify legal and reputational damage. You’ll hear practical guidance on reporting within 30 days, engaging the Australian Cyber Security Centre early, and using their support without fear of self‑incrimination. We also break down the $5.8m fine components, what the court prioritised, and why this outcome sets a floor for future actions under Australia’s privacy regime.

Directors and boards are front and centre. Outsourcing cyber does not outsource accountability. We outline the questions every board should ask, draw on the Australian Institute of Company Directors’ guidance and the ASD’s new prompts for directors, and explain how the Essential Eight baseline would have cut several risk pathways. Beyond controls, we champion small data: keep only what you need, collect it through secure portals rather than email, set retention with automated destruction, and verify supplier security because liability follows your data.

If you own risk in your organisation—CEO, director, CIO, CISO, or Practice Manager—this conversation will sharpen your priorities and your plan. Subscribe, share with your leadership team, and leave a review with the one change you’ll make this quarter.

The festive rush is a gift to scammers: more shopping, more parcels, more “urgent” messages. We unpack the most common cons hitting inboxes and phones right now and show you how a short pause and a few simple checks can save your money and identity. From fake storefronts promoted through social ads to parcel “held at customs” texts, we explain how to verify senders, match domains, and trace your original order details so you never have to click blind.

We also dive into charity impersonations that mimic trusted brands and campaign tools. You’ll learn a safer donation flow that bypasses risky links altogether, plus quick ways to spot hidden URLs and domain tricks on desktop and mobile. At work and at home, gift card scams remain a favourite: we outline the classic “CEO request,” the two-step verification that kills it, and why retailers warn customers at checkout. For tax season, we break down ATO-themed lures that play on your expectations and emotions, and we share a simple system to catch fraudulent credit checks early with credit file alerts.

Scammers are levelling up with AI: voice-cloned calls and realistic video can sound and look like someone you love. We offer a practical defence you can set up at dinner tonight—a family code word—and we close with three cyber habits that outperform any gadget: keep devices and apps updated, use unique long passwords with a manager, and enable MFA or passkeys everywhere. If you’ve ever wondered what to do after you accidentally click, we cover that too: scans, resets, and when to call a pro.

If this helped you feel more prepared for the holiday season, follow the show, share it with someone who needs a friendly heads-up, and leave a quick review to help others find us.

Since recording the free credit service is no longer available. If you are still interested in protecting your credit identity visit here for more info