START SMART, START SILVER · ONLINE WORKSHOP

Your practice,

cyber certified. In one workshop. Free.

New AML/CTF and privacy obligations are live — and your clients' data is the target. Join a practical, hands-on online workshop run by Cymax: two guided afternoons, and you leave with SMB1001 Silver — independent proof your firm is demonstrating commitment to client care.

Reserve your free seat

+ Claim it as CPD*

Certificate of completion provided · Designed for QLS members

1st July

New privacy obligations went live

$0 for QLS members

Thanks to our sponsoring partners

CPD claimable*

Certificate of completion provided

*Certified across one workshop, over two half-days — not ready on the day? You leave with clear, specific actions to finish it off offline. CPD claiming is your choice, via your member body's process.

Why your firm, why now

The AML/CTF reforms are live, and up to 100,000 firms are newly regulated (AUSTRAC estimate). Many are now inside the Privacy Act for the first time, with duties to secure personal information and to notify eligible data breaches.

The threat is escalating.

In June the Australian Government warned that AI is shrinking the time between a weakness being found and exploited to months, not years. Smaller firms holding client data are the target.

Reasonable steps are now expected.

You are expected to take reasonable steps to protect client data, and to be able to show it. A recognised, independently assured baseline is how you demonstrate that quickly.

What Silver gives you

An independently assured security baseline, not a self-assessment

Company Director Attestation at every tier, board ownership on the record

Recognised by the profession: QLS supports SMB1001 and recommends Gold. Silver is the first rung

Improved insurability, and confidence when dealing with insurers

Enhanced credibility with clients, courts and technology partners

Achievable in one guided workshop, which you may choose to claim as CPD

"Criminals won't wait for the day you have time to sort it out — and being a small practice is no defence."

David Bowles, Special Counsel — Ethics, Queensland Law Society

How it works

1 Register

Pick an upcoming workshop below. If you have an IT provider or MSP, we highly encourage you to invite them along.

2 Join the live workshop

Two guided afternoons — Day 1 sets up your policies and admin controls; Day 2 implements the technical safeguards, step by step, with templates provided.

3 Leave certified — and claim your CPD^

Your free Silver certification, issued in the session, plus a certificate of completion with your hours — ready to claim as CPD if you choose.

DAY 1 · ADMIN & PROCESS

Cybersecurity awareness training · confidentiality agreements invoice fraud policy · visitor register and digital asset register (templates provided) · prep for Day 2

DAY 2 · TECHNICAL CONTROLS

MFA on all email accounts · firewall and anti-virus · patching and backups · password manager · individual accounts without admin privileges · email anti-spoofing

^Not ready on the day? You leave with clear, specific actions to finish it off offline.

Reserve your seat

Workshops run monthly over two guided afternoons, online, and are capped to keep the cohort small. Pick the month that suits — and claim it as CPD if you choose.