SMB1001 certification, from assessment to certificate.
Essential Tech assesses your controls, closes the gaps and certifies you against SMB1001, the Australian cyber security standard for small and medium businesses, so you can show clients, insurers and tenders a certificate.
A certificate answers questions that a long email describing your controls can’t.
Supplier due diligence
A client sends a security questionnaire and expects a certificate at a defined tier.
A tender names it
A contract asks for SMB1001, or for a specific tier.
Insurance renewal
A certificate gives you a document to attach, not just answers to type.
Annual recertification
Each new edition means recertifying, so it needs planning, not a scramble.
How SMB1001 works
Five cumulative tiers
Each tier includes every control from the tiers below, across five control domains: technology, access, backup and recovery, policies, and training. Working on your Essential Eight maturity? See Essential Eight assessment. Want ongoing leadership-level guidance? See our vCIO SMB1001 advisory.
Bronze: foundational cyber hygiene
Silver: individual accounts and MFA
Gold: detection, response and governance
Platinum: independently verified
Diamond: the highest assurance tier
Bronze to Gold: attested by a director
Aligned with the Essential Eight
Recertified each year
What you get
From gap assessment to certificate
A gap assessment against your target tier
Remediation of the gaps by our team
Evidence prepared and certification completed
A certificate you can show clients, insurers and tenders
Recertification planned for each new edition
Included as a pathway in every Business Protect tier
Helping you protect what you’ve built and build what’s next. Australian owned, operating in Brisbane, Sydney and Melbourne with local accountability and global capability.