37 controls
Bronze
Entry-level baseline. Covers fundamental cyber hygiene — patching, MFA, backups, and basic access controls.
Ideal for: Businesses new to cyber security frameworks or those needing a starting point for cyber insurance.
Home / Cyber Security / CyberCert SMB1001
CyberCert Certified Partner
CyberCert SMB1001 certification for Toowoomba business
We help Toowoomba and Darling Downs businesses achieve CyberCert SMB1001 certification — from gap assessment and technical remediation through to certification support. We are SMB1001 certified ourselves, so we know the process inside out.
Certification Tiers
Five levels of cyber assurance
SMB1001 is a tiered framework — start at Bronze and progress as your security maturity grows.
55 controls
Silver
Builds on Bronze with stronger identity controls, endpoint protection, and incident response planning. Aligns closely with the ASD Essential Eight Maturity Level 1.
Ideal for: Businesses handling sensitive data, government suppliers, or those seeking cyber insurance at competitive premiums.
72 controls
Gold
Advanced controls including EDR/MDR, vulnerability management, and security awareness training. Aligns with Essential Eight Maturity Level 2.
Ideal for: Professional services, healthcare, legal, and financial businesses with higher data sensitivity requirements.
89 controls
Platinum
Comprehensive security programme with continuous monitoring, penetration testing, and formal incident response. Aligns with Essential Eight Maturity Level 3.
Ideal for: Critical infrastructure suppliers, government contractors, and businesses with the highest security obligations.
106 controls
Diamond
The highest tier. Requires a mature security operations capability, formal risk management, and third-party audit. Equivalent to ISO 27001 in rigour.
Ideal for: Large enterprises, defence industry participants, and businesses with contractual requirements for the highest assurance level.
Our Process
How we get you certified
Gap Assessment
We assess your current environment against the SMB1001 controls for your target tier and produce a prioritised remediation plan.
Technical Remediation
We implement the required technical controls — MFA, patching, endpoint protection, backup configuration, and access management.
Policy and Documentation
We prepare the required policies, procedures, and evidence documentation needed to support your certification application.
Certification Support
We guide you through the CyberCert self-assessment or third-party audit process and liaise with the certifying body on your behalf.
Want the plain-English background first? Read CyberCert SMB1001:2026 — what Australian businesses need to know.
Common Questions
Frequently asked questions
What is CyberCert SMB1001?
SMB1001 is a cybersecurity certification standard developed by CyberCert specifically for small and medium businesses in Australia. It provides a tiered framework (Bronze through Diamond) with practical, achievable controls that map to the ASD Essential Eight and ISO 27001.
Is SMB1001 mandatory?
SMB1001 is not currently mandated by Australian law, but it is increasingly required by government agencies and large enterprises as a supply chain security condition. It is also recognised by cyber insurers as evidence of good security practice, which can reduce premiums.
How long does certification take?
Bronze and Silver certifications can typically be achieved within four to eight weeks for a business that is starting from a reasonable baseline. Gold and above require more extensive remediation and documentation, typically three to six months.
What does it cost?
Our gap assessment starts from $990 + GST. Remediation costs depend on the controls required and your existing environment. We provide a fixed-price remediation quote after the gap assessment so there are no surprises.
Which tier should we target?
Most small businesses should target Bronze or Silver as a starting point. If you are a government supplier or handle sensitive client data, Silver is the recommended minimum. We will advise on the right tier during the gap assessment based on your industry, data sensitivity, and contractual obligations.
Does Downs ICT hold SMB1001 certification itself?
Yes. Downs ICT is SMB1001 certified, which means we practise what we preach and understand the certification process from the inside.
Start your SMB1001 journey today
Book a review and we'll tell you exactly where you stand and what it will take to achieve your target certification tier.