Information for grant applicants

To apply for a grant through the Cyber Invest Business Program, your business must:

• be small to medium sized business with an annual turnover of less than $10 million
• be a Territory enterprise
• have a valid Australian Business Number (ABN).

Before you apply

• Read the Cyber Invest Business Program Guidelines PDF (1015.9 KB).
• Read the General Terms and Conditions – Grants and Subsidies.
• Complete the free ACSC Cyber Health Check to help determine your cyber security needs.
• Choose an ICT or cyber security provider. You must select a provider that is a Territory enterprise.
• Prepare your supporting materials:
  • description of the project
  • itemised quote.

How to apply

• You must apply on the GrantsNT website.
• You must provide an itemised quote that meets the requirements of the selected support category.
• You must provide a description of your project including:
  • relevant support category or categories
  • proposed activities
  • products, subscriptions or services required for the project
  • project timeframe (maximum of 4 months)
  • ongoing subscription or service costs the business will need to meet after the grant funding ends.

Choosing a cyber security provider

The following information can help you assess a provider and proposed service. It does not endorse a provider, guarantee protection from cyber incidents or confirm eligibility for grant funding.

Ask the provider for clarification if anything is unclear.

About the provider

• Is the provider a Territory enterprise with an active ABN?
• Can the provider explain the proposed service in plain English?
• Can the provider provide examples, references or case studies?
• Do I understand who will perform the work?

About the quote

• Is the quote clear and itemised?
• Does the quote separate cyber security services from general IT support?
• Are all ongoing costs after the grant ends clearly identified?

About the service

• Does it address a specific cyber security problem or risk?
• Do I understand how the service will improve my business’s security?
• Will the provider supply instructions or handover information?

Managed cyber security services

If purchasing a managed cyber security service, consider these questions and the Australian Cyber Security Centre’s questions to ask managed service providers.

• Who will monitor alerts or security events?
• What happens if a cyber security issue is identified?
• What reports or updates will I receive?

Before signing

• Have I compared more than one option where practical?
• Am I comfortable that the service represents value for money?
• Do I understand any lock-in periods or ongoing commitments?

Warning signs

Consider obtaining further information if:

• the provider cannot clearly explain what you will receive
• the quote is not itemised
• most of the cost is for software subscriptions rather than services
• the service provides reports or scores without practical security improvements
• ongoing costs and commitments are unclear
• the provider guarantees protection from cyber attacks
• the provider pressures you to make a quick decision.

Free resources

Grant applicants are encouraged to access the following free services and resources before engaging a service provider.

These resources will aid small business owners and managers to understand their cyber risk.

• Australian Government's Australian Signals Directorate:
  • guidance and resources for small business
  • questions to ask managed service providers.
• Cyber Wardens online cyber awareness training and resources.
• Australian Government's Department of Business other guidance.
• IDCARE on behalf of the Australian Government - Small Business Cyber Resilience Service Assessment is available to businesses with 19 or less employees.