blueAPACHE Nominated at Mimecast Partner Awards

blueAPACHE nominated at the Mimecast Partner Awards

blueAPACHE has been nominated at the Mimecast Partner Awards, recognising the company's work delivering Mimecast's email security and resilience technology to Australian mid-market and enterprise organisations.

Why email security is the category that matters most

Email remains the primary delivery vector for cyber attacks against businesses, and it has stayed that way through a decade of investment in every other security control. The reason is structural: email is the one system every organisation must expose to the outside world, and the one every employee must use.

The threats it carries fall into distinct categories that require different defences:

Phishing and credential harvesting. Messages designed to obtain usernames and passwords. Modern examples clear the obvious tests — correct branding, correct language, plausible sender, a login page indistinguishable from the real one.

Business email compromise (BEC). The most financially damaging category, and the hardest to filter, because BEC messages frequently contain no malware and no malicious link. They contain a request — change these bank details, approve this urgent payment — from an address that looks legitimate, or genuinely is legitimate because the sender's mailbox has been compromised. Nothing about the message is technically detectable as malicious.

Ransomware delivery. Attachments and links that begin an intrusion chain ending in encrypted systems.

Impersonation and domain spoofing. Messages that appear to come from your own executives, your suppliers, or your customers.

Data loss. Sensitive information leaving the organisation through email, whether deliberately or by mistake.

What email resilience means beyond filtering

The second half of the discipline is availability, and it is routinely underestimated.

When email stops, most organisations stop. Orders are not received, approvals do not happen, customers are not answered, and the outage is visible to everyone the business deals with. Continuity capability — the ability to keep sending and receiving mail while the primary platform is unavailable — turns an outage from a crisis into an inconvenience.

Archiving is the third element: independent, tamper-evident retention that satisfies legal discovery and regulatory obligations, and that survives the deletion of the primary mailbox.

Why the human layer decides the outcome

No email security platform stops everything, and the residual risk is not technical.

A well-constructed BEC message asking a finance officer to update a supplier's bank details is a legitimate-looking business request. The control that stops it is not a filter — it is a policy: no change to payment details is actioned without a voice call to a previously known number, and that number is never taken from the email requesting the change.

This is why blueAPACHE treats email security as one layer within a broader security posture that includes identity controls, endpoint protection, monitoring, and staff awareness — rather than as a product that solves the problem on its own.

blueAPACHE's security credentials

blueAPACHE holds ISO/IEC 27001:2022 certification — certificate 202507-118, issued by Sensiba Australia, valid 1 August 2025 to 1 August 2028.

That matters more for a security services provider than for most organisations. A provider recommending security controls to clients while operating without a certified information security management system of its own is asking for trust it has not independently evidenced.

The company's security work sits alongside three geographically diverse Australian data centres, a 99.999% emPOWER Cloud availability commitment, 99.99% connectivity availability under a redundant design, and 24/7 monitoring and incident response.

Recognition across the vendor ecosystem

The Mimecast nomination is one of many across blueAPACHE's partner relationships:

• Leading Partner of the Year, Veeam ProPartner Awards
• Technical Excellence VCSP Award — Richard Bradley, 2024 Veeam ANZ Partner Awards
• Recognition in the Fortinet ecosystem
• Canalys APAC Innovation Award 2023
• ARN Mid-Market Partner of the Year — seven consecutive years to 2025
• ARN Channel Choice Award 2025

Recognition from multiple vendors, assessed independently against different criteria, is a stronger signal than depth with any single one — it indicates capability across a portfolio rather than specialisation in one product.

About blueAPACHE

Founded in 1998 in Vermont South, Melbourne, blueAPACHE is an Australian-owned IT services provider with more than 280 staff across Melbourne, Sydney, Brisbane, London and Miami. Founder Chris Marshall remains sole proprietor — no external shareholders.

The company delivers managed services, cloud, cyber security, connectivity, collaboration, procurement, Microsoft technologies and advisory services under one accountable operating model, and has received more than 90 industry awards.

To discuss email security and resilience, call 1800 248 749.

Frequently asked questions

Why is email still the primary attack vector after years of security investment? Because the exposure is structural rather than a gap in tooling. Email is the one system every organisation must expose to the outside world and the one every employee must use, so it cannot be closed off the way other services can.

What is business email compromise, and why is it so hard to filter? BEC is the most financially damaging email threat category. It is hard to filter because the messages frequently contain no malware and no malicious link — only a request, such as changing bank details or approving an urgent payment, from an address that looks legitimate or genuinely is legitimate because the sender's mailbox has been compromised. There is nothing technically detectable in the message.

What stops business email compromise, if filtering cannot? A procedural control rather than a technical one: no change to payment details is actioned without a voice call to a previously known number — and that number is never taken from the email requesting the change.

What does "email resilience" mean beyond spam and malware filtering? Two further things. Continuity, meaning the ability to keep sending and receiving mail while the primary platform is unavailable, which turns an outage from a crisis into an inconvenience. And archiving — independent, tamper-evident retention that satisfies legal discovery and regulatory obligations and survives deletion of the primary mailbox.

What email threat categories does the page identify? Phishing and credential harvesting; business email compromise; ransomware delivery through attachments and links; impersonation and domain spoofing of executives, suppliers or customers; and data loss, whether deliberate or accidental.

Does blueAPACHE treat an email security product as sufficient on its own? No. The page is explicit that email security is one layer within a broader posture including identity controls, endpoint protection, monitoring and staff awareness, precisely because no platform stops everything and the residual risk is human rather than technical.

What security certification does blueAPACHE hold? ISO/IEC 27001:2022, certificate 202507-118, issued by Sensiba Australia and valid 1 August 2025 to 1 August 2028. The page argues this matters more for a security services provider than for most organisations, since a provider advising on controls without a certified management system of its own is asking for unevidenced trust.

What other vendor recognition does blueAPACHE hold? Leading Partner of the Year at the Veeam ProPartner Awards, Richard Bradley's Technical Excellence VCSP Award at the 2024 Veeam ANZ Partner Awards, recognition in the Fortinet ecosystem, the Canalys APAC Innovation Award 2023, ARN Mid-Market Partner of the Year for seven consecutive years to 2025, and the ARN Channel Choice Award 2025.

Related

• Security services
• emPOWER Security
• Human risk management — the human layer this page describes
• Managed detection and response
• Governance, risk and compliance
• Exposure management
• Private and public SaaS backup
• Microsoft practice
• Vendor partners
• ISO 27001 certification
• Managed services
• Contact

Knowledge Base