Acumenis

Acumenis is an Australian cybersecurity and privacy consultancy that helps organisations reduce risk, meet their compliance obligations, and earn the confidence of customers, regulators, and boards. We hold ISO/IEC 27001 certification ourselves and are CREST accredited for penetration testing, meaning the standards we help clients reach are ones we already live by.

What we do:

Offensive security testing. Our CREST-accredited team performs penetration tests across web and mobile applications, APIs, cloud platforms (AWS, Azure, Google Cloud), corporate networks, and wireless environments. Engagements follow recognised methodologies including OWASP, PTES, and NIST, and every report translates technical findings into business-relevant priorities - not a dump of scanner output.

Information security programs. We guide clients through ISO/IEC 27001 from initial gap analysis through to successful certification audit. For Australian organisations, we also deliver Essential Eight maturity assessments aligned to ACSC guidance, with realistic uplift roadmaps that respect operational constraints.

Cyber incident readiness. Through tailored tabletop exercises, we put leadership teams and technical responders through realistic scenarios: ransomware, third-party compromise, insider threats, mandatory breach notification under the Privacy Act - so the muscle memory is built before a real incident lands.

Privacy and AI governance. We help clients implement and certify against ISO/IEC 27701 (privacy information management) and ISO/IEC 42001 (AI management systems), support Australian Privacy Principles compliance, conduct privacy impact assessments, and build governance frameworks for responsible AI adoption — a growing priority as generative AI moves into core business processes. How we work. Acumenis is built around senior practitioners. The consultants who scope your engagement are the ones who deliver it, and we keep our team small by design so quality stays high. Clients range