SMB1001 Certification for Brisbane Businesses

We take your business from the first meeting to the SMB1001 certificate, doing the work ourselves and not just the advice. It starts with a free consultation, with no cost and no obligation.

Book a free consultation

(07) 3179 6766

An adviser in a dark jacket takes notes while a man in glasses and a woman talk through their needs at a table
We hold SMB1001 Gold
5.0Google rating, 45+ reviews
5 levelsfrom Bronze to Diamond
12 monthsper certificate, then renewed each year
SMB1001 Gold Standard certification badgeCertified to the SMB1001 Gold Standard, an Australian cyber security standard
Microsoft Partner logo

What SMB1001 Is and Why It Matters

SMB1001 is an Australian cyber security certificate. It sets out the steps that keep a business safe online in five levels, so you start where you are and step up. A certificate shows customers, insurers and regulators where you stand.

  • Cyber insurance

    Insurers ask what security you have in place. A certificate answers that in one line.

  • Regulators and customers

    Some industries and larger customers want proof of a security standard before they sign.

  • Knowing where you stand

    You see which controls are in place and what is left to do.

A small business owner works on a laptop behind the counter of her cafe

Five Levels and the One That Fits

Each level builds on the one before. A control is one security step, such as a firewall or staff training. From Bronze to Gold your business signs off that the controls are in place. We check each control with you before you sign. We work out the level that suits you.

The five SMB1001 levels, what each covers and the certifier's yearly certificate fee
LevelWhat it coversSigned off byCertificate fee each year
Bronze7 controlsThe basics, such as a firewall, anti-virus, updates, strong passwords, backups and staff awareness.Your business$95
Silver17 controlsAdds stronger sign in, tighter access, server updates and protection against fake invoices.Your business$195
Gold27 controlsAdds written security policies, a plan for handling a security problem and advanced device and email protection.Your business$395
Platinum32 controlsAdds regular checks for weak spots and stricter sign in.Your business and an outside auditor$595 plus a yearly $3,000 audit
Diamond39 controlsAdds your supply chain, staff checks and a tested plan for handling a security problem.Your business and an outside auditor$995 plus a yearly $5,000 audit

The certificate fees are set by the certifier, CyberCert, for the 2026 edition and exclude GST. We bill the certificate fee to you. You pay any audit to the auditor directly. Our work is quoted separately.

How We Get You Certified

  1. 01

    A free consultation

    We talk through what you need, at no cost.

  2. 02

    The paid assessment

    Quoted up front, it shows where you stand, in a report.

  3. 03

    The plan to reach your level

    You get the solutions, timeframes and costs, then you decide.

  4. 04

    We put the solutions in place

    We set each one up, with your IT person or provider if you have one.

  5. 05

    The application

    Then we apply for the certificate with you and see it through.

Every year after that

A certificate lasts 12 months. Each year we check your controls still meet the level and renew it with you. Between renewals your IT person or provider keeps the controls in place. When we manage your IT, we do it.

Book a free consultation

We Do the Work for You

A woman in a dark jacket points at a laptop while a colleague with long dark hair follows along

You get the certificate and the security behind it, without your team learning the standard.

We put the fixes in

The updates, settings, sign in rules and protection each level asks for are put in by our team.

We work with your IT person

If you have an IT person or provider, we work alongside them and they keep the controls in place. If nobody looks after your IT day to day, we recommend a managed IT plan so the controls are kept in place all year.

Already on a Managed IT Plan? You Are Part Way There

You do not need a plan with us to get certified. SMB1001 is its own project for every business.

If you are on one of our top two managed IT plans, much of what the levels ask for is already in place. How much depends on your setup. Either way there is less to do, so the project is quicker.

What Certification Costs

The certifier's fee is one part of the cost. Reaching your level depends on how much your business already has in place, so every business gets its own quote.

How long it takes depends on your goal and where you start. Prices exclude GST.

Book a free consultation

  • Consultation

    We talk through what you need.

    Free

  • Assessment

    Where you stand, in a report.

    Quoted up front

  • Reaching your level

    Our time, labour and solutions. How much depends on what is already in place.

    Quoted after the assessment

  • Certificate fee

    Set by the certifier CyberCert and billed by us, again each year when we renew it. Platinum and Diamond also have a yearly audit on top, $3,000 or $5,000, which you pay the auditor directly.

    $95 to $995 a year

  • Yearly renewal

    Our work to check your controls still meet the level. It takes much less time when we manage your IT.

    Quoted each year

SMB1001 or Essential 8

Essential 8 is the Australian Government's list of security controls. In October 2026 the Australian Signals Directorate released ASD Essentials, the next version of Essential 8. Neither gives you a certificate. SMB1001 does.

We help with either and can tell you which one your customers or insurer expect. See how we take businesses through Essential 8, read SMB1001 explained on our blog or see how we look after cyber security.

Essential 8A list of controlsSMB1001Controls and a certificate

What Our Clients Say5.0★★★★★45+ Google reviews

IT Start
5.0
45 reviews
Kay D.
Excellent service in every way. Aaron was prompt, courteous and helped me with several matters during his visit. I am very happy with this company and would not hesitate to recommend it.
Max B.
Highly recommend this company. They are very efficient and always get back to you promptly. Aaron is very knowledgeable and always sorts out the problem. A big thanks and five stars from me.
steve C.
Man, these guys are the best. Cannot recommend them highly enough. Brilliant service
MrDeanClifford
Did a great job and gave me great advice.
Lynda B.
Aaron s absolutely lovely and a genius at sorting out all IT issues. He always explains everything so that it is clear. Highly recommended.
Simone B.
Thanks again Matt and team for assisting me with all things IT. Not only where all my website issues resolved in less than 24 hours from contact, your services were extremely affordable when compared to other quotes. It's a no brainer why I keep coming back. I am a grateful and loyal business owner.
Sue D.
I can’t say enough great things about this computer tech company! They come right out to your house, which is incredibly convenient, and they are always punctual. Aaron, the technician, is absolutely fantastic. He’s friendly, professional, and takes the time to clearly explain what’s going on without making you feel overwhelmed. Every time I’ve had an issue, Aaron has diagnosed and fixed the problem quickly and efficiently. It’s such a relief knowing I have someone reliable I can call who actually shows up on time and gets the job done right the first time. If you’re looking for trustworthy, knowledgeable, and friendly computer support, this is the company to call. Highly recommend!
Jon C.
I've had a great experience dealing with the team at IT Start. Both Matt and Aaron have been highly responsive and knowledgable for all of our IT requirements.
Skyline D.
Matt has been an absolute legend as our IT Support. His response time is incredibly quick. No waiting around when something goes wrong. He jumps on issues straight away and gets them sorted with minimal disruption to our team. Reliable, knowledgeable, and always supportive — exactly what you want from IT support. Highly recommend Matt to any business needing dependable tech support. Wish we could give him more than 5 stars !!
Maggie M
I’m so glad I called IT Start directly for help with setting up our office IT systems! From the moment I reached out, I was impressed with how responsive and helpful they were. Aaron came out to our office the very same week—talk about quick service! He set up everything we needed: our phones, computers, IT systems, and security setup. It was a huge relief to have it all taken care of in one go. Not only did Aaron provide top-notch service in person, but IT Start also offers excellent over-the-phone support, which is so convenient. I can always count on them if we run into any issues or need quick assistance. Aaron was super friendly, professional, and genuinely took the time to make sure everything was running smoothly. He walked us through the setup and answered all of our questions with patience, making sure we felt comfortable with everything. The pricing was also very reasonable, and I really appreciated how transparent and fair it was. If you’re looking for someone reliable who can get the job done fast and with great care—and offer solid support when you need it—I highly recommend Aaron and IT Start. They truly made the whole process easy and stress-free. Thanks again, Aaron!

Questions About SMB1001 Certification

Yes. We sit down with you to understand what you need, with no cost and no obligation.
We work out where your business is now, where it needs to be and what has to be put in place. You get a report of what is already in place and what needs to be done. The assessment is paid and quoted before we start.
It depends on how much your business already has in place. The assessment is quoted up front. Reaching your level may also need our time, labour and new solutions, which we quote after the assessment. On top of that there is the certificate fee, set by the certifier CyberCert and billed by us, from $95 a year for Bronze to $995 a year for Diamond. Platinum and Diamond also need a yearly outside audit of $3,000 or $5,000, which you pay the auditor directly. Prices exclude GST.
It depends on your goal and where you start. A business on one of our top two managed IT plans is usually much closer to the finish.
It depends on your industry, your customers and your insurer. We work out the right level with you in the free consultation.
Australian businesses from a few people up that want to show insurers, customers or regulators where their security stands. If a customer asks for a different standard, we can talk that through.
Yes. We can work alongside your current IT person or provider to get you certified. You do not need to change who looks after your IT. Between renewals they keep the controls in place.
No. Your business signs off those levels, confirming the controls are in place. We check each control with you before you sign, so you know what you are confirming. Platinum and Diamond also need an outside audit each year.
12 months. The certificate fee applies again each year. Our work to check your controls still meet the level is quoted separately. It takes much less time when we manage your IT.
We help bring your controls back up to standard as paid work. We would rather they never lapse, which is why we recommend a managed IT plan that keeps them in place all year.
No. Getting certified is always a separate project. Our top two managed IT plans already cover much of what the levels ask for, so there is less to do. When we manage your IT, we keep the controls in place between renewals.

Have a different question? Ask us directly.

Book Your Free Consultation

Call (07) 3179 6766 or send the form to arrange a time. Most messages get a reply the same business day.

Call Us

07 3179 6766

Email

support@itstart.com.au

Tell us what you need

    Call (07) 3179 6766Book a free consultation