How Cyclone Alfred tested GCIT’s systems during certification

5:58

When GCIT—a Gold Coast-based managed IT services provider—decided to pursue ISO certification for their Quality, Environmental and Information Security Management Systems, they never imagined their new systems would be tested so dramatically in the midst of a cyclone.

Yet that’s precisely what happened when Cyclone Alfred swept through the region in March 2025, giving GCIT a real-world opportunity to showcase the effectiveness of their newly implemented Emergency Response and Preparedness procedures.

From IT Cowboys to ISO Champions

GCIT recognised a significant challenge in the IT industry: many managed service providers (MSPs) either rely on self-attestation for security or lack formal accountability for quality and environmental impact. Determined to stand out as a credible, best-practice-driven provider, GCIT sought external validation through:

ISO 27001 (Information Security)
ISO 9001 (Quality Management)
ISO 14001 (Environmental Management)

By achieving these three internationally recognised ISO standards, GCIT aimed to assure clients that their security measures, quality controls, and sustainability initiatives were rigorously audited and certified by an independent body. According to Chief Information Security Officer, Elliot Munro, the reality that anyone can open an IT business without qualifications or insurance motivated GCIT to prove they took security, quality, and environmental responsibility seriously.

Building a Robust Management System

The certification journey wasn’t without its hurdles. Initially, GCIT’s approach to an Integrated Management System fell short during the Stage 1 audit. However, rather than give up, they took the auditor’s candid feedback on board. Within a matter of weeks, GCIT:

Created a comprehensive risk register to categorise and treat potential threats
Documented and reviewed all mandatory processes and policies
Conducted an internal audit to ensure they met certification requirements
Held a thorough management review to align leadership and team goals

When they returned for Stage 2, GCIT demonstrated robust information security controls, strong quality processes, and an expanding focus on environmental management.

Elliot Munro, Partner at GCIT, said "If it wasn’t for the frank advice from our Southpac Certifications Auditor, Michelle, I would have put the entire thing in the too-hard basket.”

A Real-Time Test During Cyclone Alfred

Just as GCIT wrapped up their Stage 1 and Stage 2 audits for ISO 14001, Cyclone Alfred hit the Gold Coast. Rather than derailing their efforts, this extreme weather event became a live demonstration of GCIT’s emergency preparedness:

Safety & Travel Risks: Staff were advised to work remotely to avoid hazards like fallen trees, electrocution, and flooded roads.
Environmental Considerations: Outdoor furniture and bins were secured to prevent contamination, exemplifying GCIT’s commitment to ISO 14001.
Quality & Service Disruptions: Contingency plans were activated for power and internet outages. GCIT proactively communicated with clients, advising them to shut down and unplug servers to prevent electrical damage.
Information Security Safeguards: Additional off-site backups were triggered, and access privileges were restricted to guard against heightened security risks.

These actions ensured business continuity for GCIT and their clients, demonstrating how ISO-driven policies can make an organisation more resilient under pressure. Munro notes that the cyclone offered a unique chance to verify that GCIT’s newly integrated systems genuinely met ISO standards when it mattered most.

Strengthening Morale and Market Credibility

Achieving three ISO certifications not only boosted GCIT’s operational frameworks but also energised the team. Rallying together under tight deadlines—and in the face of a natural disaster—strengthened the sense of shared purpose. Each department came away with a clearer understanding of how their responsibilities contributed to GCIT’s overarching goals.

Beyond these internal benefits, the triple ISO achievement sets GCIT apart in a competitive marketplace:

Trust & Credibility: External validation from a respected certification body reassures existing and prospective clients that GCIT’s services meet stringent global standards.
Competitive Edge: As cyber threats evolve and environmental impact gains more scrutiny, clients value a partner who proactively addresses these concerns.
Scalability: Documented processes and a culture of continual improvement allow GCIT’s services to expand without compromising on security or quality.

A Partnership with Southpac Certifications

While the path to ISO certification can seem daunting, GCIT credits Southpac Certifications for offering expert guidance and clarity on where they needed to improve.

Quote block_1

The entire Southpac Certifications team helped us navigate the complexities of the certification process without feeling overwhelmed.

– ELLIOT MUNRO, PARTNER – GCIT

That partnership not only elevated GCIT’s credibility but also reinforced the organisation’s commitment to continuous improvement—both for its internal operations and for the clients who rely on GCIT’s expertise.

Key Takeaways for Other Businesses

ISO Standards Provide Structure
Even for a successful organisation, these frameworks highlight overlooked areas—from detailed risk assessments to environmental considerations.
External Audits Drive Accountability
Self-attestation can leave gaps in security or quality processes. Third-party audits verify compliance, foster trust, and differentiate you in the market.
Emergency Preparedness Matters
Whether facing a natural disaster or internal crisis, having clear, practised procedures can save time, money, and potential reputational damage.
Team Morale Increases
Working through a demanding certification process together unites teams and creates a shared sense of purpose.
Long-Term Resilience and Growth
Certifications aren’t just pieces of paper. They guide ongoing improvements that help your organisation remain competitive and adaptable.