What is our IT spend actually buying?
We read what you already pay for, line by line, against what the business gets back: the licences never switched on, the service tier billed for capability nobody uses.
The independent audit · Opening note
№ 01
Independent IT oversight for Australian businesses.
We measure the quality, value, security and AI posture of the IT you already pay for, then write your leadership a report they can take straight to the board. A first read takes days, and the principal who did the work signs the report.
Measured againstACSC Essential Eight · ISO/IEC 27001:2022 · NIST CSF 2.0 · NIST AI RMF · your insurer’s renewal set
I. Opening brief
p. 01
Three questions a board should be able to answer.
Would we hold up to an insurer, a regulator or an auditor today?
Security is measured against the ACSC Essential Eight and the controls your insurer asks for at renewal. The same evidence answers a board paper, a proposal form and a client’s security questionnaire.
Who checks the provider’s work, other than the provider?
A managed service provider cannot grade its own delivery, however good it is. Adeo scores it each month across five domains and writes the note to your account manager for you.
See a sample issue →
II. A note on independence
Adeo assesses the IT and AI you already run, and grades it against the standards your board, your insurer and your regulator expect you to meet.
We have nothing else to sell. Your fee is our only revenue, we take no vendor commission, and we never operate the systems we assess.
III. A specimen of the work
Where your IT stands, on one page.
The scorecard on the right is page one of a monthly Pulse issue: five domains, scored, with the month’s movement. A Baseline Audit scores the same five domains at full depth on the first read.
What leadership can do with it
- Read the standing at a glance — one score, five domains, what moved since last month
- Forward the note to your MSP — written to paste and send, without editing
- Hold the roadmap to account — what was promised against what closed
Adeo Pulse Premium
Specimen
Monthly Performance Scorecard
Warburton & Field Lawyers · an invented firm; every figure synthetic
78 / 100
- Service delivery
- Commercial
- Roadmap & governance
- Security
- AI adoption & posture
Editorially signed off — AdeoPage one · View all →
IV. Where to start
p. 03
Three needs, three ways in.
One specific question
Quick-Scan
A fixed-fee read on one domain.
Microsoft 365 security, backup readiness, cyber-insurance readiness, MSP value and performance, or AI adoption and posture. One domain, a written answer within days, walked through with you.
The complete picture
Baseline Audit
The flagship engagement.
All five domains, measured against the Essential Eight and the controls your insurer requires. It concludes in a written audit with a 12-month roadmap, owners and dates, and a closing readout with leadership.
Ongoing oversight
Technology Advisory Retainer
A senior independent voice, month by month.
Monthly advisory time and the Adeo Pulse scorecard, for organisations that want an independent technical voice without a full-time IT lead. Pulse is also available on its own.
See a sample issue →When an audit finds a real use for AI, a bounded AI Enablement engagement specifies it and independently verifies what your own team builds. Compare all five engagements, with starting fees, on the Services page →
V. How we work
p. 04
We name the work. Your provider does it. We check it.
01
Thirty minutes, no cost
Conversation
We scope the question you are trying to answer and say plainly whether Adeo is the right firm to answer it. A short proposal follows, with scope, fee and dates.
02
Adeo
Assessment
Evidence comes from your own systems and the documents you hold. Every finding is written down, ranked by what it would cost you to leave it, and paired with a plain-English path to close it.
03
Your provider
Remediation
The work goes to your existing MSP or internal team, inside the agreement you already have wherever it covers the fix. A good provider gets a clear brief, and the credit for closing it.
04
Adeo
Verification
A finding stays open on our record until the evidence says it can close. Each month’s Pulse then picks up where the last one left off.
One principal runs every engagement from the first conversation to the closing readout. About the practice →
VI. Who we work with
p. 05
Sectors where independent oversight earns its place.
02
APES 110, client-data custody, and being visible to your own clients’ audit committees.
03
Privacy Act obligations, My Health Record, AHPRA’s AI principles and accreditation readiness.
04 — Every other business
How Adeo works for your business →
If your IT is outsourced and no one neutral has ever checked it, the same audit applies whatever your industry.
VII. Questions, answered
If you don’t fix anything, what am I paying for?
A grade your provider cannot issue about its own work, the exact list of what to fix and in what order, and confirmation it was done. The repairs themselves sit with your existing provider, and under most managed-service agreements much of that work is already covered by the fee you pay.
Do you replace our current MSP?
No. Adeo audits, advises and oversees; we don’t run help desks or production systems. Your MSP stays exactly where it is, and both sides gain an independent scorecard to work from.
How is Adeo independent?
Our only revenue is the fee our client pays us, so no vendor commission shades a finding. Running IT day to day stays with your MSP. Adeo measures whether it is earning its fee. On an AI Enablement engagement we specify and verify, and your own team or provider builds.
VIII. Correspondence
p. 06
Considering a renewal, or unsure how your IT is performing?
Start with a thirty-minute conversation at no cost and no obligation: a straight read on whether Adeo can help, and an honest answer if it cannot. Email contact@adeo.au with a line on your sector and the question you are trying to answer; a reply follows within one business day.
Start a Conversation →