SMB1001 certification, planned and evidenced.

SMB1001 is the Australian cyber security standard built for small and medium businesses. We assess where you stand, recommend the right tier, take you through certification and keep you ready for each year’s recertification.

Essential Tech engineers reviewing a monitoring dashboard

ISO 27001:2022 certified

SMB1001 Partner

Australian owned · Brisbane, Sydney and Melbourne

When SMB1001 comes up

Someone has asked for proof

A certificate answers questions that a long email describing your controls can’t.

Supplier due diligence

A client sends a security questionnaire and expects a certificate at a defined tier.

A tender names it

A contract asks for SMB1001, or for a specific tier.

Insurance renewal

A certificate gives you a document to attach, not just answers to type.

Annual recertification

Each new edition means recertifying, so it needs planning, not a scramble.

How SMB1001 works

Five cumulative tiers, five control domains

Each tier includes every control from the tiers below. Bronze to Gold are attested by a company director; Platinum and Diamond are independently verified. Working on Essential Eight maturity? See Essential Eight advisory.

Bronze, Silver, Gold, Platinum, Diamond

Technology management

Access management

Backup and recovery

Policies and processes

Education and training

Aligned with the Essential Eight

Recertified each year

What you receive

A clear path to your certificate

How it runs

1. Assess

Your controls measured against the SMB1001 tiers.

2. Choose your tier

The tier that answers the people asking.

3. Remediate and evidence

Gaps closed and evidence prepared.

4. Certify and maintain

Certification completed and kept current each year.

SMB1001

Start your SMB1001 pathway

Tell us who is asking and which tier they need. Every Business Protect tier also includes an SMB1001 certification pathway.

Helping you protect what you’ve built and build what’s next. Australian owned, operating in Brisbane, Sydney and Melbourne with local accountability and global capability.