James Milson Village Strengthening Cyber Resilience in Aged Care
"Our Board understood cyber security needed to be treated as a governance issue, not simply a technology issue. We needed clear advice we could act on, and that’s what Insicon Cyber provided from day one."
About James Milson Village (JMV)
For more than 50 years, James Milson Village has provided high-quality retirement living and residential aged care services. As a not-for-profit provider, the organisation is committed to delivering exceptional, person-centred care while meeting the growing operational and governance demands facing the aged care sector.
Like many providers, James Milson Village was navigating an increasingly complex digital environment, balancing cyber security, compliance and operational resilience while keeping its focus where it matters most: residents and care outcomes.
The Challenge: Increasing Cyber Scrutiny and Obligations
Aged care providers are facing growing cyber security obligations as digital systems become increasingly embedded in care delivery, rostering, resident management and business operations. For James Milson Village, cyber security had become more than an IT issue. It was a governance priority requiring clear oversight, practical planning and a trusted partner who understood both technology risk and the realities of aged care operations.
As regulatory expectations continue to evolve under the Aged Care Act 2024 and broader privacy obligations, James Milson Village recognised the need to strengthen its cyber maturity through a structured, staged approach.
A Partnership Built in Stages
Establishing the Baseline
The partnership began with a comprehensive cyber security risk assessment delivered to the Board and Executive team. The review translated technical risks into practical governance insights, giving leadership a clear understanding of the organisation’s current security posture and helping prioritise future investment.
"Our Board understood cyber security needed to be treated as a governance issue, not simply a technology issue. We needed clear advice we could act on, and that’s what Insicon Cyber provided from day one."
Building Governance and Compliance Capability
Following the initial assessment, James Milson Village undertook an Essential Eight maturity review and the development of a formal cyber policy framework. This work established a clearer benchmark for cyber resilience and provided the organisation with practical policies to support ongoing governance, accountability and operational consistency.
"The review gave us a realistic picture of where we stood and, importantly, what needed to happen next. It was practical, honest and gave us a clear roadmap."
Transitioning to Managed Security Operations
In April 2025, the partnership expanded with Insicon Cyber engaged to provide managed IT operations and security services. This gave James Milson Village access to continuous monitoring, specialist expertise and day-to-day operational support without the challenge of building that capability internally. For a mid-sized aged care provider, this created stronger oversight while reducing operational complexity.
"Having one trusted partner who understands both our technology environment and our compliance obligations has made a significant difference."
Testing Organisational Resilience
In March 2026, James Milson Village participated in a business continuity tabletop exercise focused on cyber disruption scenarios. The exercise tested executive decision-making, communication pathways and response readiness. It also highlighted opportunities to strengthen continuity planning by better integrating cyber and IT disruption scenarios into the organisation’s broader resilience framework.
"The exercise identified areas we could strengthen before facing a real-world event. That insight was incredibly valuable."
Putting Preparation into Practice
Shortly after the exercise, James Milson Village encountered a contained security event. With established governance processes, documented response procedures and direct operational support already in place, the organisation was able to respond quickly and effectively. The event reinforced the value of the work already undertaken and validated the staged approach to building resilience.
The Outcome
Today, James Milson Village has a significantly stronger cyber security foundation, including:
-
Greater Board and executive visibility of cyber risk
-
Improved policy and governance maturity
-
Continuous monitoring and operational support
-
Stronger business continuity preparedness
-
A clear roadmap for ongoing improvement
The partnership continues to evolve as James Milson Village strengthens resilience while maintaining its focus on delivering outstanding care.
A Practical Model for Aged Care
The James Milson Village journey demonstrates that cyber resilience is not built through a single project. It is developed through steady, practical progress, beginning with governance, supported by operational capability, and strengthened through testing, review and continuous improvement. For aged care providers, this approach creates confidence, resilience and better preparedness in an increasingly complex threat environment.
Ready to start your journey to increased cyber resilience?
Insicon Cyber's structured gap analysis gives you a clear, honest view of where your organisation stands against Essential Eight — and a practical plan to close the gaps. No jargon, no surprises.
Start with a Gap AnalysisContact Insicon Cyber
Speak to one of our friendly folks