From Reactive to Resilient: How ermha365 Found a True IT Partner in KMT
Cyber first managed services
Cyber
Support
Strategy
Cloud
Secure
Modern
1982
Founded
Head Office
Dandenong South, VIC
Business
Focus is on delivering specialist support services for individuals with complex mental health needs, psychosocial disabilities, acquired brain injuries, and those at risk of homelessness or social exclusion.
Managed Services
Service
03
Office Locations
600
End Users
About ermha365
ermha365 is a not-for-profit organisation dedicated to supporting people facing complex mental health and disability challenges to live meaningful lives as part of the community. Founded in 1982, the organisation has grown into a leading provider of specialist support services across Australia.
ermha365 works to support those who are often overlooked or underserved by mainstream services, delivering personalised, recovery-oriented care that fosters independence, dignity, and hope.
At the heart of ermha365’s mission is the belief that everyone has the right to a good life. As such, the company’s work includes supporting people with psychosocial disability, acquired brain injury, those at risk of homelessness or social exclusion, and more. With a trauma-informed approach and a strong advocacy voice, ermha365 partners with individuals, families, and communities to create pathways to inclusion and recovery.
In 2023, ermha365 united with The Disability Trust, another respected not-for-profit provider with a strong track record in person-centred disability support. This partnership strengthened both organisations’ ability to deliver impactful services across a broader geographic footprint, while maintaining a shared commitment to human rights, inclusion, caring for the vulnerable, and lived experience.
A partner, not just a service provider
With this rapid growth – from a team of 120 to nearly 600 staff – came the realisation that their existing MSP could no longer meet ermha365’s evolving needs. The company’s previous provider, while suitable in the early days, lacked the scale and responsiveness required to support a larger, more complex organisation. Delays in resolving technical issues and a reactive approach to IT management had become significant pain points for ermha365.
A tender process was initiated to find an MSP up to the task. ermha365 was clear in its requirements: a provider with the resources to support rapid growth, a professional service approach, and the ability to respond quickly and efficiently to IT issues. ermha365 needed a partner – not just a service provider – that could scale alongside them.
Of the many reasons KMT stood out, a proactive service model closed the deal. Unlike ermha365’s previous MSP, which focused solely on responding to support tickets, KMT actively engaged with the company and its employees to identify opportunities for improvement, provided regular educational briefings on topics such as cybersecurity, and offered strategic guidance to help ermha365 better manage and optimise its systems.
“KMT takes a proactive approach. They don’t wait for us to ask for help – they come to us with insights, suggestions, and opportunities to improve. It’s a real partnership.” Michael Bowers, CFO, ermha365.
For ermha365, this marked a shift from reactive troubleshooting to forward-looking IT partnership – exactly what was needed to support continued growth and complexity.
The Solution
From cyber aware to cyber secure
Operating in a high-trust environment where data protection and operational continuity are non-negotiable, ermha365 was increasingly exposed to cyber risks and regulatory scrutiny.
Caring for people is at the very core of ermha365 and this extends to its digital presence. KMT has played a critical role in strengthening ermha365’s cybersecurity posture during the period of both rapid growth and digital transformation. With a clear focus on achieving Maturity Level Two under the Essential Eight framework, KMT has supported ermha365 through the rollout of key initiatives designed to enhance cyber resilience.
One of the most significant milestones has been the implementation of multi-factor authentication (MFA) across the organisations – an essential control to mitigate credential-related threats. With that now completed, ermha365 is piloting mobile device management using Microsoft Intune, further strengthening endpoint security and enabling access for a growing mobile workforce.
“The process of implementing the Essential Eight controls was surprisingly straightforward. The combination of a structured approach and clear communication meant the rollout was smooth and non-disruptive. We now have a cybersecurity posture we can proudly stand behind.”
In addition to implementing the Essential Right controls such as MFA, patching, and backups, KMT also provided user training that was simple and effective
The Benefit
Education is key
Beyond technical implementation, KMT has taken a proactive role in cybersecurity education. Through regular briefings and communications, KMT has kept ermha365’s team informed on emerging threats and best practices, helping to build a culture of cyber awareness.
“One of the biggest differences with KMT is how engaged they are. They’re consistently reaching out, not just to fix issues, but to help us think ahead. Whether it’s a session on cybersecurity trends or a briefing on emerging threats, they’re always equipping us with knowledge.”
This ongoing engagement has been particularly valuable given the sensitive nature of ermha365’s work, where protecting client information is not just a compliance requirement, but a matter of trust and duty of care.
“We deal with a lot of incredibly sensitive personal and medical information. It’s imperative we have protections in place to ensure that data is safe and secure.”
A partner for the future
ermha365 is focused on expanding its mental health services. A key component of the company’s growth strategy is geographic expansion. This move is driven by the desire to improve access to specialised mental health care and address critical gaps in support systems.
“KMT doesn’t just maintain our systems, they challenge us to be better. They bring fresh ideas, recommendations, and resources to the table that help us improve how we operate, stay secure, and think about the future.”
