Cyber Incident Response for Aged Care Provider

Aged Care
Project Management & PMO

Executive Summary

A leading Australian not-for-profit aged care provider experienced a significant data breach and was required to respond rapidly to contain the incident, meet regulatory obligations and stabilise operations. With a newly appointed CIO in role, the organisation engaged Avec to provide immediate program leadership, specialist capability and scalable delivery support. Through a coordinated, multi-engagement response, Avec established governance, mobilised critical resources, and enabled the organisation to manage incident response and remediation with greater control and confidence.

Total Read Time -
X min

The challenge

The organisation faced a high-pressure environment following a data breach involving personal and sensitive staff and resident information. While the incident was swiftly contained and reported to relevant authorities, it introduced heightened operational, regulatory and reputational risk.

At the same time, a new CIO had just stepped into the role, requiring immediate support to establish command and control across multiple workstreams.

Key challenges included:

  • Coordinating response activities across a complex technology and operational landscape
  • Establishing clear governance, reporting and oversight during an active incident
  • Accessing specialist capability to support cyber, data and technology remediation
  • Addressing emerging issues within critical systems, including Salesforce-based platforms
  • Scaling delivery capacity rapidly during Christmas–New Year period, typically impacted by public holidays and organisational shutdowns, with resources mobilised from engagement on 23 December to deployment by 5 January

The organisation required a partner capable of providing both immediate response support and sustained delivery capability, while maintaining alignment with governance and assurance expectations.

The solution

Avec delivered a coordinated, multi-engagement response combining program leadership, specialist capability and rapid mobilisation of delivery resources.

Program and project leadership

Avec provided an experienced Project Manager to support the CIO in establishing command and control across incident-related initiatives.

This included:

  • PMO establishment and coordination
  • Structured reporting and governance
  • Oversight of multiple concurrent workstreams: Cyber, Salesforce, infrastructure

Capability as a Service

Avec delivered specialist capability across key domains on a flexible, as-needed basis, including:

  • Cyber security
  • Architecture
  • Program / Project Management
  • Business Analysts for Salesforce implementation
  • Infrastructure and Cyber Project Management

This model enabled the organisation to access expertise on demand, providing assurance to leadership and the board that the required capability was available as needed.

Rapid project services mobilisation

Following the identification of issues within the organisation’s Salesforce environment (supporting infrastructure), Avec mobilised a dedicated delivery team to provide project oversight and business analysis capability.

Leveraging Talent’s network, a team of five pre-vetted specialists, including project management and business analysis resources, was deployed at short notice, with confirmed resources secured within 12 hours.

The result

Avec’s support enabled the organisation to respond effectively to a complex and high-risk incident while establishing greater structure and control across its technology environment.

Key outcomes included:

  • Strengthened program governance and reporting, supporting CIO oversight during a critical period
  • Rapid access to specialist capability, enabling timely response to emerging risks and issues
  • Accelerated mobilisation of delivery resources, including a fully formed project team deployed within 12 hours
  • Enhanced coordination across multiple workstreams, supporting a more structured and controlled response

These outcomes provided the organisation with the capability and confidence to manage immediate incident response and remediation activities, while establishing a foundation for ongoing stabilisation and future capability uplift.

Client testimonial

“Avec’s calm leadership, strong organisation and ability to bring clarity and momentum to complex initiatives made a real difference, especially in those early stages. They kept everyone aligned, removed blockers quickly and created the space for the teams to focus on delivery.

I genuinely appreciate the effort, care and professionalism the Avec team has brought to this work. These projects are in a strong position because of their commitment and drive.

Thank you again for everything you’ve done, it’s been a pleasure working with Avec on this journey.”

General Manager Infrastructure, Cloud, Cybersecurity & Risk

Let's start something great, together.