blueAPACHE launches world-first Human Risk Management as a Service, powered by Mimecast

Summary

This blueAPACHE post reports: New managed capability addresses the growing human side of cyber risk for mid-market organisations, with Mimecast as the technology platform partner blueAPACHE, Australia’s most awarded mid-market IT services provider, has announced it is launching a Human Risk Management as a Service powered by Mimecast, the human, data, and AI security platform. Believed to be a world-first managed capability that brings together awareness training, policy visibility, behavioural controls, and incident remediation into a single, repeatable outcome-based service for mid-market organisations, blueAPACHE is the first Mimecast channel partner globally to bring this model to market. It concerns Human Risk Management, emPOWER Security, Governance, Risk & Compliance. It names Mimecast in connection with the announcement. Published in 2026. Figures, product names and event details reflect that time; for current information see the linked service pages.

Key facts

Article

New managed capability addresses the growing human side of cyber risk for mid-market organisations, with Mimecast as the technology platform partner

SYDNEY, 26 June 2026

blueAPACHE, Australia’s most awarded mid-market IT services provider, has announced it is launching a Human Risk Management as a Service powered by Mimecast, the human, data, and AI security platform. Believed to be a world-first managed capability that brings together awareness training, policy visibility, behavioural controls, and incident remediation into a single, repeatable outcome-based service for mid-market organisations, blueAPACHE is the first Mimecast channel partner globally to bring this model to market. The service is designed for organisations with between 50 and 1,500 seats that are managing the competing pressures of regulatory compliance, security framework alignment, and the rapid adoption of AI and cloud-based tools. For these businesses, human risk has historically been addressed in fragmented ways across multiple service lines. Human Risk Management as a Service consolidates that into a clear, per-user monthly model that sits alongside blueAPACHE’s managed services and managed detection and response bundles, giving customers a structured blueprint across the three core pillars of modern managed security.

“In the mid-market, customers are buying an outcome, not a product,” said Michael Zuppa, CEO of blueAPACHE. “What they need is a managed service that takes responsibility for awareness, cultural uplift, visibility, and remediation as a continuous, consistent capability. We have been delivering parts of this for years across our vCISO, email security, and awareness training services, but the structure was not clear enough for customers to engage with it as a whole. Human Risk Management as a Service changes that.” The need for a dedicated human risk service reflects a persistent and growing reality in Australian organisations. The biggest security incidents continue to originate from email-based threats, phishing campaigns, and human error, including employees unintentionally breaking policy or moving sensitive data without realising the risk. The rapid adoption of AI tools has compounded this exposure, with individuals already using public AI services while data classification and DLP policies are still being developed. For mid-market organisations, the gap between current maturity and adequate protection is a live and immediate risk. “Human risk has always been the hardest part of the security equation to operationalise at scale,” said Mimecast ANZ Partner Leader Lizelle Hughes. “blueAPACHE has developed something that will make meaningful change for Australian organisations. The reality is that 8% of employees generate 80% of risk, and AI agents now operate with the same access and none of the judgment that a human brings. Mimecast was built to detect and respond to that exposure across every channel where humans and AI agents work. This is the kind of outcome-focused thinking that moves the whole industry forward, and Australian organisations stand to benefit directly.” As organisations progress through data classification and AI governance maturity programmes, blueAPACHE’s Human Risk Management capability provides visibility, enforcement, and protection from day one, covering how data is being accessed, moved, and used across corporate and public AI environments while formal policy based frameworks and rules are in place. “Time is the risk,” Zuppa said. “Organisations are already on an AI journey whether they are ready or not. We need to ensure the visibility and controls we have in place are protecting the customer while they are still working through their maturity. That is what this service is designed to do.” Mimecast was selected as the platform technology partner underpinning the service following a structured assessment of MSP-aligned security platforms. blueAPACHE identified Mimecast as the leader in the category based on its human risk command centre capability, the breadth of its visibility layer, the strength of its structured training and reporting tools, and its demonstrated commitment to MSP operational requirements including flexible subscription models, licence management, and service delivery at scale. The Human Risk Management as a Service offering is now live with customers. The partnership also reflects blueAPACHE’s broader relationship with Mimecast as both a managed service delivery partner and a credible resell and implementation partner across its enterprise customer base, drawing on deep operational experience with the Mimecast platform built over many years.

About blueAPACHE

blueAPACHE is Australia’s most awarded mid‑market IT services provider. Founded in 1998, it is an Australian owned organisation specialising in Managed Services, cloud, security, and modern workplace solutions for mid‑market and enterprise customers. blueAPACHE delivers outcome-driven services underpinned by strong security standards and operational discipline, supporting highly regulated and rapidly scaling organisations across multiple industries.

About Mimecast

Mimecast protects the work of every person in the organization, across every channel, from every actor, human and AI. Founded in 2003 and headquartered in London, Mimecast serves more than 42,000 organizations and 27 million users worldwide. Mimecast analyses 24 trillion behavioural signals annually across email, collaboration, and AI agent workflows, drawing on a 20+ year behavioural baseline that no competitor matches. We secure humans, data & AI.

Related

• Human Risk Management
• emPOWER Security
• emPOWER Security (pillar)
• Governance, Risk & Compliance

Frequently asked questions

Where and when was blueAPACHE's Human Risk Management as a Service formally announced, according to this post?

The service was announced in Sydney on 26 June 2026, described as a world-first managed capability bringing together awareness training, policy visibility, behavioural controls and incident remediation for mid-market organisations.

How does Human Risk Management as a Service fit alongside blueAPACHE's other security offerings, according to the post?

The post says it sits alongside blueAPACHE's managed services and managed detection and response bundles, giving customers a structured blueprint across the three core pillars of modern managed security.

On what basis did blueAPACHE select Mimecast as its technology partner for this service?

blueAPACHE said it selected Mimecast following a structured assessment of MSP-aligned security platforms, citing its human risk command centre capability, visibility layer, training and reporting tools, and support for flexible subscription and licence management.

What scale does the post attribute to Mimecast as a company?

The post says Mimecast, founded in 2003 and headquartered in London, serves more than 42,000 organisations and 27 million users worldwide, analysing 24 trillion behavioural signals annually across a 20-plus year behavioural baseline.

Is the information in this post still current?

No. It reports on a service launch announced in June 2026 and reflects blueAPACHE's and Mimecast's partnership as it stood at that time; for the current position see the linked Human Risk Management and emPOWER Security service pages rather than treating this post as up to date.

Source

https://www.blueapache.com/blog/blueapache-launches-world-first-human-risk-management-as-a-service-powered-by-mimecast/

Knowledge Base