The Australian cyber security standard built for small business — and everything you need to reach it.
SMB1001 is a tiered Australian cyber security standard designed for small and medium business — five levels from Bronze to Diamond, each adding controls. Unlike the Essential Eight it is certifiable, so you get a badge you can show customers, insurers and supply-chain partners.
We give you everything needed to get there: the security controls each level requires, the written policies, and the evidence preparation. Certification itself is issued by CyberCert, the certifying body for the standard in Australia.
More and more Australian contracts, tenders and insurers ask whether you take security seriously. SMB1001 is how a small business proves it, without the cost and complexity of ISO 27001.
Because it is tiered, you can start at Bronze and climb — demonstrating real, growing security maturity rather than ticking a one-off box.
We hold SMB1001 Diamond — the top level — ourselves, so we are asking you to do nothing we have not done.
No — CyberCert issues SMB1001 certification in Australia, under the standard published by Dynamic Standards International. We give you everything you need to achieve it and guide you through the process.
It depends on what your customers and insurers ask for. Bronze is a strong, achievable start; many businesses target Gold. We help you choose.
The Essential Eight is a set of technical strategies with no certificate. SMB1001 is a broader, tiered standard built for small business that you can actually be certified against and show.
The plan is per user per month; certification adds a CyberCert certificate fee once a year. Full pricing is on our pricing page.
Backed by our 90-day money-back guarantee. If you're not happy, we refund everything you've paid.