SMB1001 Compliance,
Built for Small Business.
SMB1001 is Australia's dedicated cyber security certification standard for small and medium businesses, owned and maintained by DSI. BITS guides your business through the Bronze, Silver and Gold tiers, from initial assessment to certification and ongoing maintenance.
A Practical Standard, Built for Businesses Like Yours
Frameworks like the Essential Eight and ISO 27001 were designed with large organisations in mind, comprehensive, but often out of reach for a business without a dedicated IT or security team. SMB1001 was created specifically to close that gap: a standard originally championed by the Council of Small Business Organisations Australia (COSBOA) and now owned and maintained by DSI, giving small and medium businesses an achievable, tiered path to demonstrated cyber security.
Rather than a single pass or fail bar, SMB1001 is structured around progressive tiers, Bronze, Silver and Gold, so businesses can start where they are and build up their security posture over time. Certification gives clients, insurers, partners and government buyers a clear, independently recognised signal that your business takes cyber security seriously.
BITS supports Melbourne businesses through the entire SMB1001 journey: assessing your current posture, closing the technical gaps required at each tier, preparing the documentation certification requires, and keeping your certification current as the standard and your business evolve.
Purpose-Built for SMBs
Unlike enterprise frameworks, SMB1001 is designed around what a small business can realistically achieve and maintain.
Progressive Tiers
Start at Bronze and build toward Silver and Gold as your business and security needs grow.
Recognised by Clients & Insurers
Certification is a clear, independent signal of your security posture for tenders, partners and cyber insurance.
Assessed, Prepared & Maintained
BITS manages the technical work and documentation, and keeps your certification current year after year.
Bronze, Silver and Gold
SMB1001 is structured around three progressive tiers. BITS assesses your business, recommends the right starting point and manages the work to close the gap at every level.
Foundational Cyber Hygiene
The accessible starting point for any small business: core protections such as multi-factor authentication, regular patching, password policies, backups and basic staff awareness.
Strengthened Protection
Building on Bronze with more advanced controls: endpoint protection, formal incident response planning, tighter access management and more rigorous monitoring.
Advanced Assurance
The highest tier: formal governance and policy documentation, regular security testing and review, and advanced threat protection for a mature, well-managed program.
BITS Handles the Full Journey
From Assessment to Certified
A clear, structured process, so you always know what's happening and what's next.
Assess
BITS reviews your current environment and practices against your target tier, identifying exactly where the gaps are.
Remediate
We implement and configure the technical controls required to close each gap, prioritised so the highest-impact items come first.
Certify
We prepare the documentation and evidence certification requires and support you through the certification process itself.
Maintain
Ongoing checks, configuration reviews and upkeep keep your certification valid as your business and the standard evolve.
Certification, From Assessment to Ongoing Upkeep
SMB1001 certification isn't a one-off checkbox, it needs to be earned and then maintained. BITS supports the complete journey: assessing your current posture against each tier, implementing the technical controls and configuration required, preparing the documentation certification needs, and performing the ongoing checks that keep your certification valid.
- Free SMB1001 readiness assessment
- Clear roadmap to your target tier
- Hands-on implementation of required controls
- Documentation & evidence prepared for certification
- Ongoing checks & upkeep to maintain certification
- No lock-in contracts, month-to-month flexibility
SMB1001 Questions
Answered for Melbourne Businesses
SMB1001 is a cyber security certification standard designed specifically for small and medium Australian businesses. The standard was originally championed by the Council of Small Business Organisations Australia (COSBOA) and is now owned and maintained by DSI. It offers a tiered certification pathway, Bronze, Silver and Gold, that's more achievable for SMBs than enterprise-focused frameworks like ISO 27001.
SMB1001's tiers represent progressive levels of cyber security maturity. Bronze covers foundational cyber hygiene such as MFA, patching and backups. Silver adds more advanced protections and formal processes. Gold represents a mature, well-governed security program with advanced protections and regular review. BITS assesses your business to recommend the right tier to target first.
Certification gives clients, insurers, partners and government buyers an independent, recognised signal that your business takes cyber security seriously. It's increasingly requested in tenders and supplier questionnaires, and can support more favourable cyber insurance terms.
BITS assesses your current security posture against your target tier, implements the technical controls and configuration required to close any gaps, prepares the documentation and evidence certification requires, and provides ongoing checks and maintenance so your certification stays current.
The Essential Eight is the ACSC's baseline framework, mandatory for government agencies. SMB1001 is a tiered certification pathway built specifically for Australian SMBs, owned and maintained by DSI. BITS helps businesses work toward both, since the underlying controls overlap significantly.
Yes. Like most security certifications, SMB1001 isn't a one-off achievement, your environment, staff and the threat landscape all change over time. BITS provides ongoing monitoring, checks and maintenance to keep your certification current, rather than leaving you to rediscover gaps at renewal time.
Start Your SMB1001
Certification Journey Today.
Speak with BITS about SMB1001 certification for your Melbourne business, a clear assessment, hands-on implementation and ongoing support to keep you certified. No lock-in contracts.