SMB1001 Readiness
Assessment
SMB1001:2026 is Australia's cyber security certification standard built for small and medium businesses. GBS takes you from wherever you are today to certified — we assess your business against your target tier, fix what needs fixing, and manage the certification for you.
Book your assessmentHow it works
Three steps, one local partner. You choose the tier — Bronze, Silver, Gold, Platinum or Diamond — and we take care of the rest.
We assess
A GBS security specialist comes in and works through the full SMB1001 assessment with you — technology, access, backups, policies and training — measured against the certification tier you're aiming for. You get a clear picture of exactly where you stand.
We remediate
Anything not up to scratch goes into a prioritised remediation plan — what needs fixing, why it matters, and what it will take. Then we do the work: from MFA and backup improvements through to incident response plans and staff training.
We certify
Once every control is in place, we manage the certification with you — self-attested for Bronze, Silver and Gold, and full support through the independent audit for Platinum and Diamond. You end up with a certification you can show customers, insurers and supply chains.
What is SMB1001?
SMB1001 is a cyber security standard written specifically for small and medium businesses. Where frameworks like ISO 27001 or the Essential Eight can feel out of reach for a regional business, SMB1001 breaks security into five achievable tiers, starting with the basics every business should have and building up from there.
The controls sit across five domains: technology management, access management, backup and recovery, policies and processes, and education and training. Bronze, Silver and Gold certification are self-attested with your provider; Platinum and Diamond are independently verified.
Certification matters beyond the security itself. Supply chains, government buyers and cyber insurers increasingly ask what standard your business meets — and being able to answer "SMB1001 certified" is a straightforward, credible response.
The five SMB1001 tiers
Bronze
The foundations: IT support, firewall, no default passwords, protected devices, automatic updates and daily off-site backups.
Silver
Adds individual accounts, multi-factor authentication, email protections and a password policy.
Gold
Adds EDR, DKIM and DMARC, an incident response plan, asset register, staff training and an AI use policy.
Platinum
Externally verified. Adds vulnerability scanning and encryption of data at rest.
Diamond
The top tier. Adds penetration testing, incident response drills and supplier due diligence.
Book your SMB1001 readiness assessment
GBS is based in Warrnambool and supports businesses across South West Victoria, from Mount Gambier through to Ballarat and Geelong — and with remote support, anywhere beyond. Tell us a little about your business and the tier you're thinking about, and we'll come back to you with next steps.