SMB1001 certification, from assessment to certificate.

Essential Tech assesses your controls, closes the gaps and certifies you against SMB1001, the Australian cyber security standard for small and medium businesses, so you can show clients, insurers and tenders a certificate.

Essential Tech team discussing a client roadmap

ISO 27001:2022 certified

SMB1001 Partner · assessment and certification

Australian owned · Brisbane, Sydney and Melbourne

Why it matters now

Someone has asked for proof

A certificate answers questions that a long email describing your controls can’t.

Supplier due diligence

A client sends a security questionnaire and expects a certificate at a defined tier.

A tender names it

A contract asks for SMB1001, or for a specific tier.

Insurance renewal

A certificate gives you a document to attach, not just answers to type.

Annual recertification

Each new edition means recertifying, so it needs planning, not a scramble.

How SMB1001 works

Five cumulative tiers

Each tier includes every control from the tiers below, across five control domains: technology, access, backup and recovery, policies, and training. Working on your Essential Eight maturity? See Essential Eight assessment. Want ongoing leadership-level guidance? See our vCIO SMB1001 advisory.

Bronze: foundational cyber hygiene

Silver: individual accounts and MFA

Gold: detection, response and governance

Platinum: independently verified

Diamond: the highest assurance tier

Bronze to Gold: attested by a director

Aligned with the Essential Eight

Recertified each year

What you get

From gap assessment to certificate

How it works

1. Assess

Your controls measured against the SMB1001 tiers.

2. Choose your tier

The tier that answers the people asking.

3. Remediate

Gaps closed and evidence prepared.

4. Certify and maintain

Certification completed and kept current each year.

SMB1001 certification

Start your SMB1001 certification

Tell us who is asking and which tier they need. We’ll come back to you to talk it through.

Helping you protect what you’ve built and build what’s next. Australian owned, operating in Brisbane, Sydney and Melbourne with local accountability and global capability.