Cyber security looks different when you’re the person responsible for keeping a school, small business or community organisation working. There may be no dedicated security team. The person reviewing a suspicious email might also be fixing the Wi-Fi, preparing a budget and explaining to the board why an old server needs replacing.

I’m Nicholas O’Sullivan, usually Nick, an IT and cyber security professional based in Townsville. This is where I bring together my regional research, incident reporting and practical writing about the systems people depend on. My starting point is fairly simple: understand what matters, know who is responsible, and check that the controls actually work.

Start with your region

Each guide looks at the people, industries, training and public evidence behind cyber security in that region.

• Townsville: training, jobs, businesses and what is missing — the existing local landscape, the coordination gap and where to find help.
• Cairns and Far North Queensland — customer information, tourism and service businesses, the Westco Motors claim and local training infrastructure.
• Mackay — sugar, mining services, supplier access and the consequences of operational downtime.
• Rockhampton and Central Queensland — regional services, agriculture, health and education, with a closer look at building local capability.

North Queensland Cyber Watch

I started Cyber Watch to turn regional incidents into useful questions for other organisations. What is confirmed? What is still alleged? Which dependency or decision deserves a closer look in our own environment?

The Regional Queensland Cyber Security Incident Tracker brings the entries together with dates, locations, source links and evidence labels. It distinguishes incidents at regional organisations from national platform incidents that may affect people here. It is a record of the reporting collected on this site, not a census of every attack.

You can also read the full Cyber Watch series.

Practical resources for organisations

• Practical cyber security for small organisations starts with changes a small team can understand and maintain.
• The CIA Triad explains confidentiality, integrity and availability, including why an outage matters even when no data is reported stolen.
• Identity and access management looks at who can reach your information and systems.
• Beyond the Essential Eight: cybersecurity governance for Australian schools connects technical controls to purpose, ownership and investment decisions.
• School cyber audits and managed security examines what different forms of assurance actually tell a school.
• Can They Email As Me? explains the email authentication tool I built and the limits of what a public check can establish.

For an active incident, start with ASD’s reporting and assistance channels. For personal identity and cyber support, IDCARE provides assistance. An article or a website check cannot investigate your own environment.

Careers, training and regional capability

My North Queensland cyber security jobs research for 2025–26 examines advertised roles and the wider IT work that carries security responsibility. The October Townsville careers update adds local examples; it is a dated report, so check the original listing before treating a role as open.

The Townsville cyber security hub history asks what became of a publicly announced regional initiative. That question still matters: individual training courses and job advertisements don’t automatically add up to a supported regional career pathway.

The experience behind the writing

My background spans more than 17 years in IT, including small business support, state and independent education, infrastructure, cloud platforms and community governance. I hold a Graduate Diploma of Information Technology (Networking) with Distinction from Central Queensland University and a Bachelor of Multimedia Journalism from James Cook University, and am an ACS Certified Technologist. My cyber security capability has developed through practical work and continuing professional development.

About me sets out that background and its limits. My technical skills provide more detail. For an interview, background discussion or event biography, see media and cyber security commentary.

Research and consulting

I also provide cyber security and IT consulting in Townsville and North Queensland through Suburban Australia and Suburban Secure. That commercial interest is relevant when I write about the local market. This site holds my own research and commentary; Suburban Secure explains the business services.

Corrections and useful public sources are welcome through my contact page. The aim is to make regional cyber security easier to understand, including the gaps in what we know.