ASI boosts A/NZ managed security services with Insicon Cyber acquisition
ASI adds a 24/7 security operations centre through Insicon Cyber acquisition
ASI Solutions has acquired Australian cybersecurity specialist Insicon Cyber, adding a North Sydney-based 24/7 security operations centre to its managed services business across Australia and New Zealand.
Insicon Cyber provides managed detection and response, managed SIEM, board and executive cyber advice, and CISO as a service. Its co-founders will stay in charge. Matt Miller remains chief executive, and Greg Bunt remains chief information security officer.
Financial terms were not disclosed. Insicon Cyber will also keep operating under its own name as an ASI Solutions company.
What the acquisition adds for customers
The practical addition is round-the-clock security monitoring backed by a local team. A security operations centre watches alerts, investigates suspicious activity, and helps coordinate a response when something goes wrong.
That does not mean every customer suddenly receives better protection. The result depends on what systems are connected to the service, how alerts are handled, and whether someone has authority to act after hours. A monitoring service that only sends unreadable alerts to a busy owner is not a security plan.
Insicon Cyber also brings advisory and compliance work. Its services include CISO as a service, which gives an organisation access to senior security leadership without hiring a full-time CISO. That can help a growing company prepare for customer security reviews, insurance renewals, board questions, or formal compliance work.
The company holds ISO 27001, ISO 9001, ISO 42001, ISO 14001, and ISO 45001 certifications. Those certifications may matter to organisations that need evidence of defined processes, especially in government, education, and regulated commercial work.
What this means for a 30-person company
For a 30-person business in San Diego County, the acquisition itself changes nothing. It does not alter local support, California reporting obligations, or the need to secure Microsoft 365, endpoints, identities, backups, and remote access.
The underlying idea still matters. Smaller businesses rarely have the budget for a security analyst working overnight, a senior security executive, and an internal compliance specialist. Buying those capabilities as a managed service can make financial sense.
But we would not start by shopping for a 24/7 SOC. We would first ask whether the basics are under control. Are administrator accounts protected with phishing-resistant or app-based multifactor authentication? Are former employees removed quickly? Do backups resist ransomware? Can the business restore critical files? Are endpoint alerts reviewed by a real person?
If those answers are unclear, adding a sophisticated monitoring service may produce a large monthly bill without fixing the main exposure.
Why the local SOC claim needs a closer look
Local operation is useful, but it is not magic. A North Sydney SOC may provide clear ownership and regional expertise for ASI’s Australian and New Zealand customers. It does not automatically make a service better for a company operating in California.
We would ask any provider direct questions before signing. What tools are monitored? What counts as an incident? Who contacts us at 2 a.m.? How quickly does a human respond? Can the provider isolate a device or disable an account, or does it only recommend those actions?
We would also ask for sample reports and a plain explanation of the escalation process. If the answer requires a technical dictionary, the service is not ready for a business owner to approve.
Our take on the acquisition
This is a sensible expansion for ASI Solutions. Insicon Cyber adds services that many mid-sized organisations cannot build internally, and keeping Miller and Bunt in their existing roles should reduce disruption.
The acquisition is not a reason to panic or replace an existing IT provider. It is a reminder that security operations and security leadership can be purchased instead of staffed internally. The right choice depends on the company’s systems, risk, customer requirements, and ability to respond when an alert arrives.
Next, ask your IT provider for a written after-hours incident plan and a gap review covering accounts, endpoints, backups, and email. IT911Now can help with that review, then show you which security services deserve your budget and which ones do not.