SMB1001 is the Australian cyber security standard built for small and medium businesses. We assess where you stand, recommend the right tier, take you through certification and keep you ready for each year’s recertification.
A certificate answers questions that a long email describing your controls can’t.
Supplier due diligence
A client sends a security questionnaire and expects a certificate at a defined tier.
A tender names it
A contract asks for SMB1001, or for a specific tier.
Insurance renewal
A certificate gives you a document to attach, not just answers to type.
Annual recertification
Each new edition means recertifying, so it needs planning, not a scramble.
How SMB1001 works
Five cumulative tiers, five control domains
Each tier includes every control from the tiers below. Bronze to Gold are attested by a company director; Platinum and Diamond are independently verified. Working on Essential Eight maturity? See Essential Eight advisory.
Helping you protect what you’ve built and build what’s next. Australian owned, operating in Brisbane, Sydney and Melbourne with local accountability and global capability.