The October Challenge — Cyber Security Action Month 2026

Take a second. Then take an assessment.

October is Cyber Security Action Month. Complete a free CyberSmart360 assessment this month, tell us the one thing you will fix first, and you could win twelve months of the full platform.

Start the free trial
Enter now
Read the terms

How to enter

Three steps

  1. Start a free trial. Seven days, no credit card, one full assessment against the ACSC Essential Eight orthe cyber security principles from ASD’s Information Security Manual — every control rewritten in the language of your industry.
  2. Complete and submit the assessment. You get a compliance score and a ranked gap report showing which controls are in place, which are not, and which matter most for a business like yours.
  3. Tell us, in 25 words or fewer: what is the one thing your assessment showed you that you are going to fix first, and why? Submit it in the form below by 11:59 pm AEST, Saturday 31 October 2026.

Already a subscriber? Submit any assessment during October and complete the form. If you win, twelve months is added to your current term.

The prize

Twelve months of CyberSmart360 Standard

The full platform for a year, at no charge. Not redeemable for cash or transferable.

✔ Assessments against both frameworks, at every maturity level
✔ A scored, ranked gap report
✔ A costed twelve-month remediation plan
✔ The evidence tracker
✔ Downloadable PDF reports for insurers and tender panels
✔ Two users, ten assessments

Judged, not drawn

Every entry is read by our founder. One criterion: the entry names one specific gap the assessment revealed and explains clearly why it comes first. Specific beats general. Honest beats polished. Scores are private and play no part in judging.

Entries close 11:59 pm AEST, Saturday 31 October 2026. Judging is completed by Friday 6 November. The winner is notified by email by Monday 9 November and announced here with their permission.

Four weeks, four actions

Week 1 — Multi-factor authentication. Email first, then banking, accounting and customer data. 1–7 October.

Week 2 — Updates. Automatic everywhere it can be; a list of anything that cannot. 8–14 October.

Week 3 — Passphrases and a password manager. Unique by default, shared logins retired. 15–21 October.

Week 4 — Backups. A separate copy, and a restore you have actually tested. 22–28 October.

Each week ends with how to record what you did, so October’s work is still visible in a year. Follow along on the CyberSmart360 LinkedIn page.

Print the four-week checklist

One page, four actions, a tick box and a date line for each, and what to keep as your record. Pin it up, give each week an owner, and initial it as you go.

    We email you a copy of the checklist once, so you can find it again. Nothing else, unless you tick the box below.

    Also send me the weekly CyberSmart360 newsletter: one cyber security control in plain language each week. You can unsubscribe at any time.

    We handle your email as set out in our privacy policy.

     

    Enter the October Challenge

    Open to Australian businesses with an ABN or ACN. One entry per business. Assessment must be submitted between 1 and 31 October 2026 AEST. Full terms and conditions.

    Entry Form

    Entries have closed.

    The October Challenge closed at 11:59 pm AEST on Saturday 31 October 2026. Every entry is being read, and the winner will be announced here. The free assessment is still available at any time.

    Cyber Security Action Month is an Australian Government campaign.

    Free posters, tiles and a stakeholder kit for your own team are at nationalcybersecurity.gov.au.

    The campaign hashtag is #CyberMonth2026.

    CyberSmart360 is not affiliated with or endorsed by the Australian Government.