Computer Services & Information Technology Limited

25/08/2026

Ten questions your IT provider should be pleased you asked.

Every provider will tell you the backups are running and everything is monitored. That was once enough. Insurers, auditors and your larger clients have all moved from asking whether you have a control to asking you to prove it.

This is not a trap for your current provider. Most of these are questions a good one already wants you to ask, because the answers make the case for the resources they have been requesting.

Ten questions, the exact wording to send by email, what a good answer sounds like, and a page on how to read the replies you get back.

Free, 14 pages, no sales call attached:https://computerservices.co.nz/assets/PDFs/LinkedIn/CSL_Ten_Questions_To_Ask_Your_IT_Provider.pdf

24/08/2026

Boards get told that backups are running. They rarely get told when recovery was last proven.

Cyber risk has moved onto the board agenda for three reasons: insurers now want evidence of board oversight, the money now moves without anything breaking, and clients have started asking you to demonstrate your security position before awarding work.

None of that requires a board to become technical. It requires nine questions and a sense of what an adequate answer sounds like.

So we wrote them down, with the answer that should satisfy you, the answer that should not, and the three numbers every board should be able to state. There is also a one page quarterly report format and a plain-English glossary.

Free, 16 pages, no technical knowledge assumed:https://computerservices.co.nz/assets/PDFs/LinkedIn/CSL_Nine_Questions_For_Your_Board.pdf

23/08/2026

Your next cyber insurance renewal is a security audit, whether it is described that way or not.

Underwriters have moved from asking whether you have a control to asking you to prove that it works. Multi-factor authentication on email is now treated by several New Zealand insurers as a pass or fail question rather than something that affects your premium.

The part that matters more comes later. After an incident, a forensic investigation establishes what your systems actually looked like, and that gets compared against what you told the insurer.

We have set out the seven controls that cover most of what a proposal form asks about, the evidence to keep for each, and the five reasons claims are commonly reduced or declined. There is a tick sheet at the back to take into your renewal meeting.

Free, 16 pages. General information rather than insurance advice, so your broker is still the right person to talk to about your own cover:https://computerservices.co.nz/assets/PDFs/LinkedIn/CSL_Cyber_Insurance_Readiness_Checklist.pdf

20/08/2026

Artificial intelligence (AI) policy

Your team is already using artificial intelligence. Your business probably does not have a policy covering it.

That gap is where the risk sits. Not in anything dramatic, but in a client list pasted into a free chatbot to be tidied up, or a draft contract summarised on somebody's personal account.

The instinct is to ban it. Banning does not stop the behaviour, it moves it onto personal phones where you have no visibility at all.

So we wrote a policy instead. It is two pages, it has blanks to fill in, and it answers the four questions any workable policy needs to answer. There is also a never-enter list short enough that your team will actually remember it.

Free to adapt, rename and use as your own:https://computerservices.co.nz/assets/PDFs/LinkedIn/CSL_AI_Acceptable_Use_Policy_Starter.pdf

19/08/2026

Invoice fraud

The invoice was real. The email thread was real. The bank account was not.

Eighty four thousand dollars, paid to an account that was not the supplier's. The accounts administrator did the right thing and replied to the thread to verify the change. She received a confirmation within the hour.

It came from the attacker. Her question never reached the supplier, because a rule in a compromised mailbox had quietly diverted it.

Nobody in that story was careless. The control that failed was verifying a change to bank details using the same channel the change arrived on.

We have written the full timeline out, from the first stolen login through to the payment discovered nine weeks later, along with the four process checks that break the chain. Includes a payment change control you can adopt this week.

Free, 14 pages, written for finance rather than for technicians:https://computerservices.co.nz/assets/PDFs/LinkedIn/CSL_Invoice_Fraud_How_It_Actually_Happens.pdf

12/08/2026

10 guard rails for using artificial intelligence at work.

Used well, these tools save real hours every week. Used without limits, they quietly move confidential information out of the business and put confident wrong answers in front of your customers.

The full ten are in the image. If you only do three of them, do these:

Decide what must never be pasted in. Have a person check anything before it sends, pays or publishes. And check the facts -- names, numbers and dates -- before you use the answer.

None of it costs anything. The Ministry of Business, Innovation and Employment and the Office of the Privacy Commissioner both publish free guidance written for New Zealand businesses -- links are on our blog. https://computerservices.co.nz/blog/10-guard-rails-that-matter-most-for-ai

05/08/2026

"Which AI should we use?" is the question we get asked most at the moment.

It is a fair question. It is just not the first one.

Here is what we would ask first. Do you have an AI policy? Do your staff know what should never be typed into an AI chat? And would you know if somebody did it anyway?

Because the tool is easy to change. What has already been pasted into somebody else's AI is not.

Most cyber trouble still starts with a person doing something completely ordinary, and AI makes that quieter than ever. There is no dodgy link to click and no warning sign. Someone pastes the customer list into a free chatbot after hours, gets a great summary back, and closes the tab. Nothing for you to see.

Think of it like teaching your kids to ride a bike. You explain how it works. You fit training wheels. You go slow, where you can see them. Then you take the wheels off.

Same with AI: Teach the team first
Write the ground rules down and put the wheels on
Approved tools, on business accounts rather than personal ones
Keep customer, staff and pricing data out of it until the controls are in place

Our newsletter this week goes through all of it, including the numbers and two free government guides worth reading.

Want a hand? Call us on 0800 002 367 or email [email protected]. No sales pitch, just the five questions and an honest answer.

30/07/2026

Heads up, New Zealand -- a phone scam is doing the rounds.

Someone rings claiming to be a Police officer. They say you have been a victim of fraud, then try to get money, bank details, a PIN or passwords out of you. Some are even targeting people who hold cryptocurrency. Scammers can make a real Police number appear on your screen, so do not trust the number you see.

What to do if you get one of these calls:

Ask for their full name, ID number (QID) and station.
Hang up -- do not follow any instructions.
Call 105 (Police non-emergency) and ask that officer to call you back.

Real Police will NEVER ask for cash, PINs or passwords over the phone.

Please share this with older family and friends -- they are the ones most often targeted. And if you are ever unsure about a call, an email or a payment, give us a ring first. Better safe than sorry.

Computer Services Ltd 0800 002 367 | [email protected]

30/07/2026

This is important to know.

🚨Scam Alert🚨

Scammers are impersonating police officers by phone and email, claiming cryptocurrency assets are at risk and directing victims to fake websites designed to steal funds.

⚠️ Some emails may appear to come from legitimate police accounts.

⚠️ Scammers may know personal information about you.

If in doubt:
✅ Ask for the officer's name and ID number

✅ Hang up and call 105 to verify

❌ Never share your recovery/seed phrase

❌ Never enter it into a website

27/07/2026

Proactive IT support, not firefighting

Break/fix support means you only hear from your IT provider after something has already broken. Ad hoc patching, unmonitored servers, and backups nobody has tested.

Managed service flips that around. Monitoring on every device, Endpoint Detection and Response with 24/7 threat hunting, verified daily backups with an offsite copy, and a tested monthly patch cycle. Problems get caught before your team notices them.

Our managed clients across Auckland tell us the difference is fewer interruptions and less time lost.

"The team at Computer Services has consistently delivered outstanding service — a reliable partner we can count on." Hantie T.

Rated 4.9 out of 5 from more than 60 reviews on Google.

Read reviews
https://search.google.com/local/reviews?placeid=ChIJp4vmnz45DW0RHhTnHPI7N_U

Book a free, no-obligation consultation.

0800 002 367 | [email protected]