John Mackenzie · JMacTech
AI And Cyber Products, Built And Run In Public
Six ventures across cyber risk, AI governance, business intelligence, and training. Each one draws on 90 qualifications and advice given to 14 billion-dollar organisations.
My Ventures
Products I Build And Run
BlackSnow Intelligence
You Get Screened Out Before Anyone Calls You.
Reads your website the way procurement teams and their AI do: privacy policy, data protection agreement, and sub-processor list. Free, no account.
CyberTown
Cyber Judgment, Trained Through Real Decisions.
Role-based cybersecurity training built on realistic decision scenarios, with dashboards and evidence exports for governance.
AIEOS
The Governed AI Software Production Environment.
Direct an AI workforce across accounts and providers. Work is split into accountable items, independently reviewed, and nothing reaches Done without evidence.
AIwatx
Measured, Not Modelled.
Measures AI token use on your own machine, applies a published method, and proves the saving against your own baseline. Early access, no public site yet.
LLM Vault
Govern Every AI Interaction. Prove Every Decision.
The governed layer between an organisation and every model, agent, and coding tool it uses: classification, policy gating, routing, review, and tamper-evident evidence.
Business Intelligence Hub
The AI-Enabled Operating System For Leaders.
Map your company, run a governed AI team, and keep every action traced and human-approved. Built for 50 to 250 employee EU companies.
Work With John
Fire Busywork. Free People.
One repetitive task, handed to AI. Your people keep the judgment, the decisions, and the relationships.
Busywork Assessment
Free 30 minutes
Find the one task worth handing to AI first.
Book The Free AssessmentAI Tools Audit
$997 one-off
A full map of where AI fits your workflow, and where it must not.
Ask About The AuditConcierge Build
From $2,500 per task
John builds the AI assistant for one task and hands it over working.
Discuss A BuildBooks
Published Books
Black Snow: Boardrooms Playing Billion Dollar Chinese Whispers
The leader's playbook for resilience and cyber defensibility — how governance failures cascade and what it takes to build institutions that survive real-world shocks.
Hacked: Why You? Postcode Targeting
Cybercriminals don't pick victims at random. The mechanics of postcode targeting and the practical steps to protect yourself and your organisation.
Black Snow: Banking & Finance — Credit Stress and Liquidity Crisis
Volume two of the Governance Failure Series — structural vulnerabilities inside banking and the fault lines between credit stress, liquidity, and governance.
Research
Research Papers
Cyber Cube Theory and the Failure of Cyber Governance
Cyber Cube Theory reframes serious cyber incidents as organisational governance failures, not just technical failures. It examines how board oversight, executive management, control reality, assurance quality, privacy, AI, suppliers, and evidence combine to shape cyber defensibility.
Advocatus: Institutionalising Evidentiary Governance in Cyber Defensibility
Advocatus introduces a board-level challenge architecture for cyber defensibility. It examines how high-consequence cyber claims should be tested through structured dissent, proportional proof, evidence quality, and traceable governance decisions.
Black Snow–Informed Internal Audit
Black Snow–Informed Internal Audit examines why compliant organisations still fail. It reframes internal audit around catastrophic cyber risk, weak signals, sequencing, culture, resource allocation, assurance distortion, and structural proximity to severe cyber harm.
The Cyber Butterfly Effect
The Cyber Butterfly Effect explains how small tolerated weaknesses can move through an organisation’s cyber DNA and eventually create disproportionate harm. It focuses on micro-causation, hidden weakness, supplier opacity, behavioural adaptation, and assurance failure.
Sequence Matters: Non-Commutative Operators in Organisational Cyber Risk
Sequence Matters argues that the order of cyber interventions changes the risk outcome. It examines how controls act on technical, behavioural, and symbolic organisational states, making cybersecurity sequencing a first-class governance variable.
A General Theory of Organisational Cyber Risk
A General Theory of Organisational Cyber Risk reframes cyber risk as a survivability problem in a tail-dominant environment. It challenges expected-loss thinking, compliance proxies, averaging, and weak board-level assumptions about cyber defensibility.
Evidence
Proof of Capability
Selected evidence of capability across cybersecurity, AI, training, business, research, product development, and long-term personal output.
Cybersecurity GRC
Governance, risk, compliance, security uplift, cyber strategy, critical infrastructure, identity, privacy, data, and resilience work — across 14 billion-dollar enterprises, including 10 ASX-listed organisations.
ExploreAI and Digital Systems
Applied AI, digital systems, app development, workflow design, technical thinking, and practical implementation.
ExploreISO Training Authority
ISO 27001 and ISO 42000 trainer. JMac Learning delivers ISO 27001 and ISO 42000 certificate training for professionals and organisations.
VisitTraining
Australian Government certified and qualified trainer across business, artificial intelligence, information technology, and cybersecurity.
ExploreResearch and Writing
Original research, longform analysis, papers, technical notes, books, and public thinking.
ExploreProduct Development
Apps, websites, systems, methods, training assets, public tools, and implementation-oriented digital products.
ExplorePersonal Accomplishment
Long-term learning, qualifications, endurance sport, creative output, business building, public work, and consistent execution.
ExploreEducation Arm
JMac Learning
Standards-aligned training across AI, cybersecurity, business, information technology, ISO 27001, and ISO 42000.
JMac Learning is the training and capability development arm connected to the JMacTech ecosystem. It translates John Mackenzie's experience across cybersecurity, AI, business, governance, risk, compliance, and digital systems into practical learning programs.
ISO 27001 Certificate Training
Information security management certificate training for professionals and organisations seeking structured understanding of ISO 27001, risk, controls, governance, and implementation.
ISO 42000 Certificate Training
AI management certificate training for professionals and organisations seeking structured understanding of responsible AI, AI governance, risk, accountability, and management system requirements.
Business, AI, IT, and Cybersecurity Training
Australian Government certified and qualified training capability across business, artificial intelligence, information technology, and cybersecurity.
Practical Capability Development
Training designed to connect standards, business reality, cyber risk, AI adoption, and implementation challenges.
In Beta
Sales First 100
Find your first hundred customers and win them one conversation at a time.
A sales system for founders and small teams: the Dream 100 method finds the exact people already talking about your problem, and the Viral 100 method turns every reply into standing in the communities where they gather. Now open to beta members.
Also Building
Other Builds And Experiments
Smaller apps and experiments that run alongside the six ventures.
Traffic Engine
AI-informed traffic analysis, content signal tracking, and digital growth intelligence.
Active BuildApp BluePrint
App planning, architecture, design patterns, and implementation templates.
In DevelopmentAgentWindow
AI agent interface, monitoring, orchestration, and oversight concepts.
ConceptPublicSignal
Public data, public trust, signal detection, and external intelligence monitoring.
PrototypeMyCyber
Personal and organisational cybersecurity tools, controls, and capability systems.
Active BuildSpiritDeck
A digital card and reflection system for insight, learning, strategy, and decision support.
ConceptMyWork
Personal knowledge, work tracking, portfolio, and execution operating system.
In DevelopmentEntity Overwatch
Entity monitoring, risk intelligence, cyber defensibility, and public exposure awareness.
Major ProjectThe Person Behind The Work
Personal Accomplishments
A selected record of personal, professional, creative, athletic, learning, training, and business milestones behind the work.
90 Qualifications
Formal and professional training across cyber, AI, governance, business, IT, ISO standards, and training.
ISO 27001 And ISO 42000 Trainer
Trains ISO 27001 and ISO 42000 through JMac Learning.
Federal Government Advisor
Former Entrepreneurs' Programme Business Advisor (2015–2017).
Marathon & Cycling Champion
Multiple Victorian Country State titles across marathon and cycling.
Start With One Conversation
Pick a venture, or book a free 30-minute call to find the one task in your business worth handing to AI first.