Kaon Security

Information security advice for councils and enterprises

From Auckland, New Zealand, Kaon Security advises on information security. It serves government bodies, councils and commercial enterprises across New Zealand and Australia, and its work is built around governance, risk and compliance. Its published client list includes councils such as Wellington Shire, Maitland City, MidCoast, Lockyer Valley and Nillumbik, along with Trinity College, Wellington International Airport, Ports of Auckland and the energy company Horizon Energy Group.

Policy management as a service

The core offer is policy management as a service. Kaon writes and manages information security policies and sets up IT policy systems that are mapped to industry standards. Implementations have been carried out for councils, a school, an airport and a port, and a lighter version, called Lite, is also offered. The aim is a set of policies that are current, understood and actually followed.

Digital forensics and incident response

When a malicious incident happens, Kaon's digital forensics and incident response work investigates what occurred and helps the client respond. The firm also encourages organisations to ask how prepared they are for such an event, so that they understand their risks before one arrives.

Testing systems and reviewing third parties

Kaon tests how a client's systems operate and how they are managed, and it uses ethical hacking to identify real-world risks. Third-party information security risk reviews examine the risk that comes from suppliers and outside partners. Office 365 and Microsoft 365 security reviews and audits cover the cloud productivity environments that many clients now rely on.

A focus on the human side of security

Kaon Security describes its specialty as the human factors side of information security, meaning how people behave and make decisions around systems and data. The firm says that long-term relationships with clients, built on trust, are what keep clients improving their security maturity over time.

Governance, risk and compliance for organisations

The firm helps organisations assess and manage their information security risk profile, and it gives strategic and tactical advice on governance, risk and compliance. Its services include risk assessments, policy development and compliance management, meant to protect an organisation's data, manage its risks and keep it aligned with industry standards.