efex is AMA SA’s exclusive partner in technology, cyber security and practice continuity

AMA SA member benefit

Know where your practice stands on cyber security

Book your complimentary cyber security audit today and get an objective assessment of your security posture against the Essential Eight, the baseline set of cyber security measures published by the Australian Signals Directorate. You'll gain valuable insights into your risk exposure, understand your preparedness for a cyber attack, and receive clear, prioritised actions to help protect your practice.

Your time

45 minutes

You receive

A written report

REGULAR PRICE

$5,000

Nothing goes offline and patient appointments are not disrupted. Whether you use Best Practice, MedicalDirector, Genie or another clinical system, your practice continues operating as normal while the cyber security audit is conducted.

Book your complimentary cyber security audit

Exclusive to AMA SA members.

The report belongs to your practice. You are free to use it with your existing IT provider, your internal team, or any adviser you choose.

Why now

Healthcare is the number 1 targeted sector by cyber criminals

95%of cyber attacks succeeded

in the health and social assistance sector that the Australian Signals Directorate responded to in 2024–25. Across all sectors, the figure was 52 per cent.

Source: Australian Signals Directorate, Annual Cyber Threat Report 2024–25.

A cyber incident can bring a medical practice to a standstill, disrupting patient care, access to records and billing. Yet many practices have never had an independent cyber security audit.

A cyber security audit can identify common gaps such as shared logins, untested backups and outdated user access, giving you a clear understanding of your risks and where to focus next.

What we assess

Your practice against the Essential Eight

We assess your practice against the eight controls the Australian Government identifies as most effective against the attacks that occur. It is the same set that insurers and accreditation processes now ask about.

Each of the eight is set out below as a question about your practice.

Passwords and sign-in

We assess whether a stolen password alone would be enough to reach your systems, or whether a second step stands in the way.

Administrative access

We identify who can install software, change security settings, or make changes to business-critical systems.

Application updates

We assess whether your programs carry the current security fixes, or are running versions with known weaknesses.

Operating system updates

We ask the same question of the computers and servers themselves.

Unapproved software

We assess whether a program that nobody has approved can be run on a practice computer.

Microsoft Office macros

We review one specific setting in Office that attackers commonly rely on to gain entry.

Browser and PDF settings

We review the settings that quietly prevent several of the most common forms of attack.

Backups and restoration

We look beyond whether backups are running and assess whether they have been tested and can be restored when needed.

The formal name for this set of controls is the Essential Eight, published by the Australian Cyber Security Centre.

Scope

What is included, and what you receive

What is included

The cyber security audit covers one computer and one server in your practice, against all eight controls at maturity level 1. It addresses the common, unsophisticated attacks that make up the majority of what practices encounter.

This audit gives you a clear snapshot of where you stand today and helps identify the most important priorities to address first. It is designed to provide practical, actionable insights without unnecessary delay.

What you receive

A written report presented by our team of cyber security experts outlining what is protecting your practice well, where gaps exist, and the highest-priority actions to strengthen your security posture.

The report belongs to your practice, to act on with or without efex.

How it works

4 simple steps

1
We confirm your membership with AMA SA
You do not need to provide a membership number. We confirm it with AMA SA directly.
2
We arrange a time that is convenient for you
The audit takes 45 minutes and can be carried out on site or remotely. Nothing is taken offline, your clinical software continues to run, and appointments are not affected.
3
We carry out the cyber security audit
We review the configuration and settings of one computer and one server against the eight controls. This provides a practical snapshot of your current position.
4
We send you the written report and guide you through the findings
The report summarises your current position against the eight controls, highlights key risks and opportunities for improvement, and provides practical recommendations on what to address first. We guide you through the findings in a 30-minute discussion. If you'd like assistance implementing any recommendations, we're happy to discuss how we may be able to help.

Who we are

Who is doing the cyber security audit

efex has a team of technology specialists based in Adelaide and works with medical practices across Australia and New Zealand, supporting more than 2000 medical and allied health practices, from general practice and specialist rooms to diagnostic imaging.

We understand that technology issues in a medical practice are more than just IT problems. As AMA SA's exclusive technology and cyber security partner, we are dedicated to helping South Australian medical practices maintain practice continuity, protect sensitive patient information, and ensure the technology that supports patient care is always available when it's needed most.

In practice

What practices say about us

We help radiology and imaging practices across Australia, and support IntelePACS, Visage, Karisma, Comrad, Voyager and QUBS.

“efex’s support removed the burden of daily IT issues. Our imaging throughput improved, and we now trust our infrastructure and support in critical moments.”
Dr Vinnie Berera RadX Hobart

Systems we support