Tim Harrison
Managing partner, CCP
Managing partner, CCP
Tim runs CCP. Twenty-five years in IT, twenty in voice and infrastructure, and a stubborn refusal to ship things he wouldn't want running on his own kit. Writes here about the operator side of running technology in Australia.
Posts by Tim Harrison
All newsOperations
Copilot Cowork is generally available. This is where it starts getting expensive.
Copilot Cowork went generally available on 16 June 2026 and bills per task, on top of the Microsoft 365 Copilot licence. What that costs, and who should get it.
30 June 2026 · 9 min read
Cybersecurity
The Five Eyes just wrote to your board. Here's the map we already hold every client to.
Six Five Eyes cyber agency heads wrote to business leaders, not IT teams. They asked for five things. Every CCP client already has to meet all five.
25 June 2026 · 6 min read
Managed IT
Copilot Cowork just went pay-per-use, two weeks after we demoed it.
Microsoft switched Copilot Cowork to pay-per-use on 16 June 2026. The Copilot licence you already bought does not cover the work it does. What that costs.
24 June 2026 · 3 min read
Compliance
ISO 27001 in twelve months: what it took to get certified
We hold an ISO 27001 certificate from BSI. Twelve months, five phases, a grant deadline, and the discovery that we could not prove what we already did.
19 May 2026 · 13 min read
Compliance
An Aged Care Provider's Guide to the Aged Care Act 2024 IT Obligations in 2026
The Aged Care Act 2024 has been in force since 1 November 2025. Six months on, the seven Strengthened Standards ask more of a provider's IT than most expected.
5 May 2026 · 12 min read
Cybersecurity
Going passwordless for Xero, MYOB, and the rest of your cloud apps
Your staff know the Xero password, the MYOB password and a dozen more. Microsoft 365 Business Premium can take every one of them out of their hands.
4 May 2026 · 7 min read
Cybersecurity
You can't get phished if you don't have a password.
Going passwordless is the single biggest security improvement an Australian business on Microsoft 365 can make. What it means, and what your staff see.
29 April 2026 · 11 min read
Cybersecurity
SMB1001 in 2026: What the Cyber Certificate Actually Proves, and What It Doesn't
Three of the five SMB1001 tiers rest on a company director's signature, not an audit. Our read on what the certificate proves, and where to be careful.
28 April 2026 · 9 min read
Compliance
A Law Firm's Guide to Tranche 2 AML/CTF Obligations in 2026
Conveyancing and trust work put a law firm inside AUSTRAC's Tranche 2 rules from 1 July 2026. What the systems have to do, and what it costs.
21 April 2026 · 9 min read
Cybersecurity
The Vercel breach started with someone installing Roblox cheats
A Context.ai employee downloaded Roblox cheat tools. Two months later, Vercel customers had source code and credentials stolen. Here is every step.
20 April 2026 · 6 min read
Managed IT
CCP VOICE: our new cloud phone platform
CCP VOICE is our new cloud phone system. Live queue boards, supervisor tools, Microsoft 365 and Teams integration, CRM connectors, and free migration.
14 April 2026 · 6 min read
Managed IT
Microsoft 365 price changes from 1 July 2026
Microsoft is changing Office 365 and Microsoft 365 prices from 1 July 2026. Plan-by-plan Australian dollar estimates and what's bundled into the new pricing.
14 April 2026 · 3 min read
Compliance
An Accountant's Guide to Tranche 2 AML/CTF Obligations in 2026
AUSTRAC's Tranche 2 AML/CTF rules cover accounting practices doing company formation, trustee and client-money work from 1 July 2026. What your systems need.
7 April 2026 · 12 min read
Compliance
An RTO's Guide to the 2025 Standards for RTOs and Their IT Obligations in 2026
ASQA's 2025 Standards for RTOs replaced the 2015 Standards on 1 July 2025. What the audit teams now expect of your IT systems, your records and your retention.
5 March 2026 · 12 min read
Operations
AI makes the work faster. It might also make us worse at it.
A new study on AI-assisted coding: juniors finish two minutes faster and score 17 points lower on understanding. The trade behind AI productivity claims.
15 February 2026 · 3 min read
Compliance
Microsoft 365 Copilot now sends data to Anthropic by default. Here's how to think about it.
Anthropic's Claude turns on by default in Microsoft 365 Copilot from 7 January 2026. What it adds to your data trail, and the call to make before then.
18 December 2025 · 3 min read
Managed IT
AI is making your hardware more expensive, even if you don't use AI
DDR5 memory has tripled, SSDs are following, and your next refresh will cost more. What the AI buildout is doing to your IT budget, and how to plan around it.
15 December 2025 · 4 min read
Operations
When your vendor goes silent: lessons from reviving an open-source platform
The vendor behind our open-source phone platform went quiet, so we revived it with everyone else stuck the same way. What that taught me about exit plans.
5 September 2025 · 6 min read
Operations
The Pascua ruling: why offshore IT contractors just became a legal liability
The Fair Work Commission's Pascua ruling extended Australian employment protections to a Filipino remote worker. What it means if your IT support is offshore.
15 June 2025 · 3 min read
Operations
New plans, a security floor, and the end of pay-by-the-hour.
Three changes to how we work with clients. A security baseline everyone meets, four plans in place of the old lineup, and no hourly work for managed clients.
31 May 2025 · 6 min read
Compliance
Mandatory Ransomware Reporting Starts 30 May: What the Cyber Security Act 2024 Asks Of You
From 30 May 2025, ransomware payments must be reported to Home Affairs within 72 hours. Who the duty covers, and what it takes to be ready for it.
2 May 2025 · 9 min read
Cybersecurity
$160,000 gone. $15,000 about to follow. How the crypto recovery scam works.
A travel agent's phone call stopped a Perth woman flying to London to hand a scammer $15,000 in person. How the recovery scam works, and how to spot it.
15 April 2025 · 5 min read
Compliance
The Privacy Act Gets Its Teeth: What the 2024 Reforms Mean for Notifiable Data Breaches
The Privacy and Other Legislation Amendment Bill 2024 has passed the Senate and awaits Royal Assent. What it would add, and what to do before it does.
28 November 2024 · 9 min read
Compliance
Directors on the Hook for Cyber: What the Section 180 Position Actually Is in 2024
Cyber risk is now inside a director's duty of care under section 180. What that asks of a board at a 20 to 250 staff Australian company in 2024.
15 August 2024 · 8 min read