Terms and Conditions

These Terms and Conditions govern access to and use of the isrcyber.com website, as well as enquiries, quotations, orders, purchases and professional services provided under the ISRCYBER brand.

By accessing the website, submitting an enquiry, accepting a quotation, placing an order, paying an invoice or using our products or services, you agree to these Terms.

A separate quotation, proposal, statement of work, service agreement or order confirmation may contain additional terms. Where there is an inconsistency, the specifically agreed document will apply to the relevant product or service.

You must have the legal capacity to enter into an agreement with us. When acting for a company, organisation or another person, you confirm that you are authorised to accept these Terms on their behalf.

You must provide accurate, current and complete contact, billing, technical and delivery information. We may delay or suspend an order or service where information is incomplete, inaccurate or cannot reasonably be verified.

You may use this website for lawful personal or business purposes, including reviewing our services, requesting a quotation, contacting our team and purchasing available products.

• You must not attempt to gain unauthorised access to the website, hosting environment, accounts, systems or data.
• You must not introduce malicious code, automated attacks, excessive traffic or any material intended to disrupt the website or its users.
• You must not scrape, reproduce, republish or commercially exploit website content without our written permission.
• You must not use our website, products or services for unlawful, fraudulent, abusive or unauthorised activities.

Website information is provided for general business and informational purposes. It does not constitute legal, financial, regulatory or insurance advice.

Cybersecurity risk cannot be completely eliminated. Unless expressly stated in a signed agreement, we do not guarantee that a system, network, website, device or organisation will be completely secure, vulnerability-free, uninterrupted or protected against every current or future threat.

Assessments and recommendations reflect the agreed scope, access, information, technologies and threat conditions available at the time the work is performed.

Quotations remain valid for the period stated in the quotation. If no period is stated, the quotation may be withdrawn or updated before acceptance.

The scope of work includes only the products, deliverables, systems, locations, environments and tasks expressly described in the accepted quotation or statement of work.

Requests outside the agreed scope may require a written variation, revised timetable and additional fees. We will seek approval before performing material additional work unless urgent action is reasonably required to protect systems, data or service continuity.

Unless stated otherwise, prices are expressed in Australian dollars. GST will be identified and applied where required by Australian law.

Payment must be made using the methods and by the due dates shown at checkout, in the quotation or on the invoice. Deposits, staged payments or advance payment may be required before work begins or products are ordered.

Where an amount remains overdue, we may issue a reminder and, after reasonable notice, pause further work, access, delivery or support until the account is brought up to date.

You remain responsible for reasonable third-party charges you have approved, including licences, cloud services, domain registrations, hardware, delivery and specialist supplier costs.

Submitting an online order is an offer to purchase. An order is accepted when we issue confirmation or otherwise confirm that the order will be fulfilled.

Products, licences, equipment and services may be subject to supplier availability, technical compatibility, geographic restrictions and verification requirements.

We may reject or cancel an order where there is a genuine pricing or description error, suspected fraud, an unavailable product, a legal restriction or an issue that prevents lawful fulfilment. Where payment has already been received, we will provide any refund required by applicable law.

Delivery dates are estimates unless expressly confirmed as guaranteed in writing. Delivery may depend on couriers, distributors, manufacturers and circumstances outside our reasonable control.

You must provide a safe and accurate delivery location and notify us promptly of visible transit damage, missing items or incorrect products.

Product photographs, specifications and descriptions are provided to assist identification. Minor manufacturer changes may occur provided that the product remains materially consistent with its stated purpose and your rights under applicable law are not affected.

Title to products remains with us until full payment has been received, to the extent permitted by law. Risk passes in accordance with applicable consumer law and the agreed delivery arrangements.

You must provide the access, information, credentials, permissions, personnel and decisions reasonably required for us to perform the agreed services.

• Obtain all internal, third-party, landlord, network owner and system owner approvals required for the work.
• Maintain appropriate backups unless backup management is expressly included in our agreed scope.
• Tell us about known technical restrictions, critical systems, safety requirements and business continuity risks.
• Keep credentials secure and notify us promptly of suspected compromise or unauthorised use.
• Review reports, recommendations, staging environments and deliverables within the requested timeframe.
• Use products, systems and recommendations in accordance with manufacturer instructions and applicable laws.

Vulnerability assessments, penetration testing and related security activities will only be performed against systems, accounts, applications, networks and infrastructure that you own or are properly authorised to test.

You must provide accurate written authorisation and identify any third-party systems, exclusions, restricted testing methods, operational limitations and emergency contacts before testing begins.

We may stop or modify testing where we reasonably believe that continuing could cause disproportionate disruption, affect an unauthorised third party, create a safety risk or breach applicable law.

Security reports are confidential and represent a point-in-time assessment. New vulnerabilities, changes, misconfigurations or attacks may arise after testing. Responsibility for approving and implementing remediation remains with the customer unless remediation services are expressly included.

Support availability, response targets, included hours, supported equipment and service levels are limited to the applicable quotation, support plan or service agreement.

Response targets are not guarantees of complete resolution within a particular period unless a signed service agreement expressly states otherwise.

We are not responsible for delays caused by unavailable customer representatives, missing access, unsupported equipment, expired licences, third-party outages or circumstances beyond our reasonable control.

Systems analysis and optimisation services are based on the access, information, systems and environments included in the approved scope.

Recommendations may be affected by changes to software, infrastructure, third-party platforms, user behaviour or business requirements after the assessment is completed.

Performance improvements may depend on customer approval, hardware upgrades, licensing, third-party cooperation and the implementation of recommended changes.

Unless expressly agreed in writing, we do not guarantee a specific percentage improvement, financial saving or uninterrupted system availability.

Website projects are based on the approved scope, content, functionality, integrations and revision allowance. Additional pages, features, integrations or redesign work may be treated as a variation.

You are responsible for ensuring that text, images, trademarks, product information and other materials you provide are accurate, lawful and properly licensed.

Search rankings, visitor numbers, sales, enquiries, advertising performance and commercial outcomes depend on factors outside our control and are not guaranteed.

Final deployment, transfer or release of agreed deliverables may be conditional on payment of all amounts due for the relevant project.

Our services may rely on third-party hardware, software, cloud providers, hosting companies, payment processors, telecommunications providers, plugins, APIs, licences and delivery services.

Third-party products and platforms may be subject to their own terms, pricing, availability, warranties and privacy practices. We do not control changes, outages or discontinuation by those providers.

This clause does not exclude any responsibility that we have under the Australian Consumer Law or another law that cannot lawfully be excluded.

ISRCYBER retains ownership of its pre-existing methodologies, templates, tools, processes, documentation, software, know-how, branding and intellectual property.

Ownership or licensing of project-specific deliverables will be determined by the relevant quotation or agreement. Unless otherwise agreed, rights granted to the customer become effective after full payment for the applicable deliverables.

You grant us a limited licence to use materials supplied by you solely for providing the agreed services. You confirm that you have the rights and permissions necessary for us to use those materials.

You must not copy, modify, reverse engineer, resell or commercially exploit our proprietary tools, reports, templates or website content except as expressly authorised.

Each party must take reasonable steps to protect confidential information received from the other party and use it only for the agreed business relationship.

Confidentiality does not apply to information that is already public through no breach, independently developed, lawfully received from another source or required to be disclosed by law.

Cybersecurity findings, credentials, network information, reports and remediation details must be treated as confidential and shared only with authorised personnel.

Personal information will be handled in accordance with our Privacy Policy and applicable Australian privacy requirements, including the Privacy Act 1988 and the Australian Privacy Principles where they apply.

We may send transactional communications necessary to process enquiries, orders, projects, security matters and support requests.

Marketing emails and other commercial electronic messages will be sent in accordance with applicable Australian consent, identification and unsubscribe requirements.

You may unsubscribe from promotional communications without affecting necessary service, security or transaction notices.

Cancellation and rescheduling rights may depend on the type of product or service, work already completed, resources reserved and third-party costs already incurred.

Where permitted by law, you may be required to pay for work properly performed and reasonable non-recoverable costs incurred before cancellation.

We will not impose a charge that is unlawful, disproportionate or inconsistent with mandatory consumer rights.

We may suspend or terminate an engagement after reasonable notice where there is material non-payment, unlawful use, unsafe conditions, unauthorised testing, serious misuse, repeated non-cooperation or a material breach that has not been remedied.

Our products and services may come with guarantees that cannot be excluded under the Australian Consumer Law.

Nothing in these Terms excludes, restricts or modifies any consumer guarantee, right or remedy that cannot lawfully be excluded, restricted or modified.

Where a product or service does not comply with an applicable consumer guarantee, you may be entitled to a repair, replacement, refund, cancellation, re-supply or another remedy depending on the circumstances and the requirements of the law.

A change-of-mind return is not automatically required unless we have expressly offered one. This does not affect your rights where a product or service is faulty, unsafe, misdescribed or otherwise fails to meet an applicable consumer guarantee.

To the maximum extent permitted by law, neither party will be liable to the other for indirect or consequential loss that was not reasonably foreseeable, including loss of opportunity, revenue or anticipated savings.

For claims that do not involve rights or liabilities that cannot lawfully be limited, our aggregate liability arising from the affected product or service will be limited to the amount paid or payable for that affected product or service during the 12 months preceding the event giving rise to the claim.

Any limitation applies only to the extent that it is lawful, reasonable and not unfair. It does not apply to fraud, wilful misconduct, liability for death or personal injury caused by negligence, or another liability that cannot legally be excluded or limited.

Your failure to maintain backups, implement agreed recommendations, provide accurate information or obtain required authorisations may be taken into account when determining responsibility for a loss.

To the extent permitted by law, you indemnify ISRCYBER against third-party claims, losses and reasonable costs to the extent caused by your unlawful use of our services, unauthorised security testing, infringement of third-party rights, materially inaccurate instructions or breach of these Terms.

This indemnity is reduced to the extent that the relevant loss was caused or contributed to by ISRCYBER’s negligence, breach of contract or unlawful conduct.

Neither party will be responsible for delay or failure caused by events outside its reasonable control, including major telecommunications outages, utility failures, cyberattacks by third parties, natural disasters, government restrictions, supply interruptions or widespread platform failures.

The affected party must take reasonable steps to minimise disruption and resume performance. This clause does not excuse payment for products or services already properly supplied.

Please contact us first if you have a concern. Both parties agree to provide relevant information and attempt to resolve the matter in good faith.

If a business dispute cannot be resolved directly, the parties may agree to mediation in Australia before commencing court proceedings, except where urgent relief is required.

Nothing in this section prevents a consumer from contacting an appropriate consumer protection body, tribunal or court, or exercising any right available under applicable law.

These Terms are governed by the applicable laws of Australia and any applicable laws of the Australian state or territory connected with the relevant transaction or service.

Subject to mandatory consumer rights, disputes may be brought before an Australian court or tribunal that has jurisdiction over the matter.

We may update these Terms to reflect changes to our operations, products, services or legal obligations. The current version and effective date will be published on this page.

Updated Terms apply prospectively unless otherwise required by law or agreed with you. Existing accepted projects remain subject to the terms applying when accepted, together with any later written variation.

If a provision is found to be invalid or unenforceable, it will be read down or severed to the minimum extent necessary, without affecting the remaining provisions.

These Terms, together with an accepted quotation, order, policy or written agreement, form the entire agreement for the relevant transaction.