bcom ICT holds no organisational ISO certification. bcom ICT operates an information security management system aligned to ISO/IEC 27001:2022 and works to the ASD Essential Eight and ITIL 4, with individual certifications held by its people — ITIL 4 Foundation and ISO/IEC 42001:2023 Lead Implementer, issued by BSI. Professional indemnity, cyber liability and public liability insurance are held.
Held, aligned, and the difference
These two words get used interchangeably across the IT industry and they mean very different things. Held means a credential exists, issued by a named body, and can be verified. Aligned means we operate and document the practices a standard describes, but no accredited auditor has checked us against it.
Under Australian Consumer Law, implying a certification you don't hold is misleading conduct. It's also the fastest way to lose a tender when someone asks for the certificate. So the list below is split, and it stays split.
ITIL 4 Foundation — Ollie
Individual certification in IT service management. Underwrites how bcom ICT runs incidents, requests, changes and service levels.
ISO/IEC 42001:2023 Lead Implementer — Ollie
Individual certification in AI management systems, issued by BSI, and the basis for how bcom ICT governs its own AI work.
Professional indemnity, cyber liability and public liability insurance
All three held. Certificates of currency available on request — larger clients and insurance brokers usually ask, and we'd rather you didn't have to chase it.
National police checks and Queensland Blue Cards
Held by technicians attending client sites. Relevant to healthcare, education and childcare clients where screening is a hard requirement.
Microsoft Partner
bcom ICT is a Microsoft partner and deploys Microsoft 365 and Azure for clients across Australia.
ASD Essential Eight
The Australian baseline. bcom ICT operates client environments against the Essential Eight and can assess and report maturity levels.
ISO/IEC 27001:2022 — information security
bcom ICT operates an information security management system aligned to ISO/IEC 27001:2022. bcom ICT is not certified to ISO/IEC 27001. Alignment means the controls are operated and documented; it does not mean an accredited body has audited them.
ISO/IEC 20000-1:2018 — service management
Service delivery practices align with ISO/IEC 20000-1. Not certified.
ISO 22301 — business continuity
Backup, disaster recovery and incident response work is aligned to ISO 22301 principles. Not certified.
Cabling
Fixed cabling connected to the telecommunications network legally requires a registered cabler in Australia. bcom ICT does not hold that registration — cabling is carried out by ACMA registered cabling contractors that bcom ICT engages and manages, with testing and certification documentation provided on completion.
If your procurement process requires suppliers certified to ISO 27001, we're not currently that supplier and we'll say so at the first conversation rather than at the end of a bid.
Everything set out in full
The marketing pages stay in plain English. This is where the detail lives, for the people who need it — buyers comparing providers, insurers, auditors and accountants.
Service levels
Our published priority matrix, response targets, escalation path and what happens to your data if you leave.
How we work — ITIL 4
Service desk, incidents, requests, problems, change control and continual improvement, in plain English.
Data handling and sovereignty
What data we hold, where it lives, who can reach it, and how long we keep it.
Onboarding — the first 30 days
Exactly what happens when a business moves to us, step by step.
Notifiable Data Breaches
Your obligations under the NDB scheme, and what bcom ICT does and doesn't do in a notification.
Ransomware payment reporting
Australia's mandatory reporting obligations if a business makes a ransomware payment.
Essential Eight
The Australian security baseline explained, and how we assess and lift maturity.
Why this page exists
We run the same disciplines a large IT department runs — documented, monitored, and measured against real standards. We just run them at a size that suits a business with eight staff, and we explain them in English.
That claim is easy to make and hard to prove, which is what this section of the site is for. Everything above is checkable: the credentials name their issuing bodies, the insurance certificates are available on request, and the service levels are published rather than negotiated privately per client.
bcom ICT is the trading name of Bcom Services Pty Ltd, ABN 92 636 893 108, trading on the Gold Coast since 2011. The ABN is publicly verifiable.
Something here out of date, or a claim you think we cannot support? Tell us and we will correct it. Every page in this section carries a review date, and the compliance guides are checked against their sources before that date is bumped.
Questions Gold Coast businesses ask us
Do you carry insurance?
Yes — professional indemnity, cyber liability and public liability. Certificates of currency are available on request. Larger clients and insurance brokers routinely ask for these before engaging a provider.
Who actually does the work?
bcom ICT's own team, with two exceptions we're explicit about. Fixed cabling is carried out by ACMA registered cabling contractors, because it's a licensed trade in Australia. Security operations centre (SOC) monitoring is delivered by a specialist third-party security provider, whose analysts monitor, investigate and respond 24/7. Everything else is us.
What happens to our documentation if we leave?
You get it. Asset register, network documentation, licences, credentials and configuration details are handed over on exit. We treat a clean exit as part of the service — a provider who makes leaving painful is telling you something about how confident they are in the rest.
Questions we haven't answered here?
If you're evaluating providers and need something specific — a certificate, a policy, a reference — ask and we'll send it.