Blog
Articles from our consultants across Dynamics 365, the Power Platform, cloud engineering, cyber security, AI and custom software.
Automated decision-making: what your privacy policy must say from 10 December
From 10 December 2026, APP entities must disclose the decisions their software makes about people. What APP 1.7 to 1.9 require and how to get ready.
Ben Jones
Read the post →ASD Essentials: what it means for your Essential Eight
ASD launched ASD Essentials on 15 October 2026 to succeed the Essential Eight. What has changed, when the Essential Eight retires, and whether your current work still counts.
Ben Jones
Read the post →How long does a Dynamics 365 implementation take?
Business Central takes three to six months and Finance and Operations nine to eighteen. Data quality and decision speed decide where in the range you land.
Marcel Rizzolo
Read the post →Essential Eight checklist: evidence to have ready before anyone asks
One question and one piece of evidence per control: the Essential Eight checklist to work through before an insurer, auditor or enterprise customer asks.
Ben Jones
Read the post →Essential 8 maturity model explained: what levels 1, 2 and 3 mean
The Essential Eight maturity model scores you at your weakest control. What maturity levels zero to three mean, how assessment works, and how to choose a target level.
Ben Jones
Read the post →How much does staff augmentation cost in Australia? (2026 rates)
Onshore augmented engineers run $850 to $1,900 a day depending on seniority and scarcity; managed offshore engineers $400 to $750. The rate table, what moves it, and the costs that never appear on the invoice.
Marcel Rizzolo
Read the post →Staff augmentation vs outsourcing vs managed services: how to choose
Staff augmentation, project outsourcing and managed services differ on one point: who is accountable for the outcome. Choose by the problem you have.
Marcel Rizzolo
Read the post →Taking over a software project: what the first 90 days need
Taking over a software project built by someone else starts with an assessment and stabilisation. A rewrite is a last resort, however easy it is to sell.
Ha Nguyen
Read the post →Historical ERP data: reporting from a lakehouse after migration
Every ERP migration hears the request for ten years of history in the new system. Where historical ERP data should live instead, and how to keep every question answerable.
Hai Tran
Read the post →Software development outsourcing in Australia: a buyer's guide
Where the work goes, what it costs, and the questions to ask before signing. Written by someone who runs an offshore delivery centre and would rather you asked them of us too.
Marcel Rizzolo
Read the post →What does a vCISO do? A few days a month, explained
Most mid-sized organisations need CISO-level judgement a few days a month, not a full-time hire. What a vCISO spends that time on, and the signal you have outgrown the model.
Ben Jones
Read the post →How much does a Dynamics 365 implementation cost? (2026 guide)
Business Central implementations land in the low to mid six figures; Finance and Operations programmes start in the high six figures and often pass seven. The bands, the licensing, and the four decisions that move the number.
Marcel Rizzolo
Read the post →How much does a penetration test cost in Australia? (2026 guide)
Most penetration tests in Australia cost between $8,000 and $35,000; red team engagements start around $60,000. What each type costs, what moves the price, and how to avoid paying for a scan with a letterhead.
Ben Jones
Read the post →What Dynamics 365 support should include after hypercare
Hypercare ends and the implementation partner rolls off. What a Dynamics 365 support arrangement needs to contain to keep the estate healthy for the next ten years.
Marcel Rizzolo
Read the post →Cloud cost optimisation: where avoidable Azure spend hides
Most cloud estates we review carry 20 to 30 per cent avoidable spend. To reduce Azure costs, start with the same five places every time.
Harry Le
Read the post →LLM evaluation: why the test harness matters more than the model
An LLM evaluation harness tells you with a number whether your AI system is any good. What it contains, how long it takes to build, and what changes once it exists.
Duke Le
Read the post →Power Platform licensing: model the costs before you build
Power Platform licensing costs are predictable. Model premium connectors, Dataverse capacity and per-user or per-app plans against the full rollout before you build.
Marcel Rizzolo
Read the post →Taking an offshore team in-house: how our Transition option works
If a Coder Trove team has been embedded in your programme for a while, you can take it in-house. How the Assemble, Operate, Transition option works, when it fits, and what a handover involves.
Marcel Rizzolo
Read the post →Dual-write in Dynamics 365: where it works and where it hurts
Dual-write keeps F&O and Customer Engagement in sync for master data and prospect-to-cash. Where it fits, where it struggles, and when Azure integration serves better.
Marcel Rizzolo
Read the post →Penetration test scoping: how to scope a test that finds real risk
Penetration test scoping decides what a test can find. How to scope from the assets an attacker wants, handle exclusions, and get a report and retest worth paying for.
Ben Jones
Read the post →How to manage Dynamics 365 One Version updates
Microsoft ships Dynamics 365 updates on its schedule. The way to take them without risk is a routine: sandbox, automated regression tests, fixes inside the window, production on time.
Marcel Rizzolo
Read the post →Permission-aware RAG: retrieval that respects user permissions
Permission-aware RAG runs retrieval as the requesting user, so restricted documents never reach the model. How to build it, where it fails, and why it gets you better data.
Duke Le
Read the post →Azure landing zones as code: environments from a pipeline
An Azure landing zone built as code turns a new environment into a parameter file and a pipeline run, identical to every other environment, in place of weeks of tickets.
Harry Le
Read the post →Essential Eight maturity: what insurers and auditors now expect
Insurers, auditors and enterprise customers now use the Essential Eight to assess Australian businesses, and they check that controls operate. What they look for and how to prepare.
Ben Jones
Read the post →Embedded engineering teams: staff augmentation that works long term
An embedded engineering team lasts when engineers are chosen for product judgement, join your team fully and stay long enough for continuity to pay back.
Marcel Rizzolo
Read the post →AX 2012 to D365 migration: four mistakes AX estates make
The AX 2012 estates still running are the complicated ones. The four migration mistakes that repeat, all made before any tool runs, and how to avoid them.
Marcel Rizzolo
Read the post →Power Platform governance: environments, DLP and CoE before app forty
Power Platform governance means an environment strategy, DLP policies, ownership rules and a small CoE. Set up early it takes weeks; retrofitted, it is a project.
Marcel Rizzolo
Read the post →Why AI projects fail: RAG retrieval problems, not the model
Most production AI failures trace back to RAG retrieval: stale indexes, broken chunking, conflicting documents and late permissions. What to fix before worrying about the model.
Duke Le
Read the post →Incident response tabletop exercise: rehearse the plan
An incident response plan only works if it has been rehearsed. A half-day tabletop exercise, run at least once a year, finds the gaps before a real incident does.
Ben Jones
Read the post →D365 data migration: why F&O go-lives are decided before UAT
The outcome of a D365 Finance and Operations go-live is largely set before UAT, by data migration. How to plan it, rehearse cutover and decide what history to move.
Marcel Rizzolo
Read the post →Cloud migration decommissioning: plan the data centre exit first
A cloud migration is finished when the old environment is switched off. Plan decommissioning and the data centre exit as committed milestones from the start.
Harry Le
Read the post →Tell us what you're solving.
A short note about the problem is enough: a platform, a programme, a security concern. A consultant who has done comparable work replies within one business day.