SMB1001 Certification

Prove your security. Win more business.

Certified SMB1001 Partner

Prove your security. Win more business.

Your clients are asking harder questions about how you protect their data. Excelium guides you through SMB1001 certification — the internationally recognised standard built specifically for businesses like yours.

1 in 5

SMBs would be forced out of business by a successful cyberattack — yet most lack a structured defence

$56K

Average cost of an email compromise incident for a small business in Australia (ACSC 2024–25).

5 Tiers

Bronze to Diamond — each building real, verifiable security you can demonstrate to clients. 
THE CHALLENGE FOR SMBS

Cyber threats don't discriminate by size

SMBs are increasingly targeted — and clients, insurers, and regulators are all demanding proof that you take security seriously.

Lock EmojiVector representation of Lock emoji

Clients want assurance

Larger organisations require suppliers to demonstrate security maturity before signing contracts. Without certification, you risk losing out to competitors who can prove their posture.
Clipboard EmojiVector representation of Clipboard emoji

Insurers are tightening requirements

Cyber insurance premiums are rising and requirements are stiffening. SMB1001 certification gives underwriters something concrete to assess — and may unlock better coverage.
Balance Scale EmojiVector representation of Balance Scale emoji

Regulations aren't slowing down

Privacy laws, data breach obligations, and government supplier requirements are expanding. SMB1001 aligns with Australia's Essential Eight and global frameworks — one standard, broad coverage.

"A cyberattack isn't just an IT problem. It's a business crisis — and for most SMBs, there's no playbook ready."

SMB1001 changes that. It gives your business a structured, internationally recognised path to genuine cyber resilience — and the certificate to prove it to every client who asks.
Excelium covers the full journey
From your first gap assessment through to Diamond-level compliance and everything in between.
HOW EXCELIUM WORKS

From assessment to certified in four steps

Free Gap Assessment

We evaluate your current controls against your target tier and produce a clear, prioritised remediation roadmap.

Implementation

Our team deploys the technical controls and drafts the policies and documentation your certification requires.

Certification

We guide you through the CyberCert assessment — self-attested for Bronze–Gold, IVO-audited for Platinum–Diamond.

Ongoing Assurance

Annual renewals, continuous monitoring, staff training, and proactive updates keep your certification current.

WHAT EXCELIUM DELIVERS

Four services. One clear path.

Gap Assessment

We benchmark your current security posture against the SMB1001 framework and give you a clear, prioritised roadmap to your target tier — no jargon, no guesswork.

Technical Implementation

We deploy and configure the controls your certification requires — from firewalls and endpoint protection through to EDR, DMARC, MFA, and vulnerability scanning.

Policy & Documentation

Certification requires more than technology — it requires written policies and evidence. We draft everything your assessors need, tailored to your business.

Ongoing Compliance Management

SMB1001 renews annually and evolves each year. We keep your controls current, your evidence up to date, and your team trained — so recertification is seamless.
WHY IT MATTERS

Security you can demonstrate.

SMB1001 certification isn’t just about avoiding attacks. It’s about opening doors, building trust, and turning cybersecurity into a competitive advantage.

Handshake EmojiVector representation of Handshake emoji

Win and retain clients

Larger organisations and government agencies are requiring evidence of security maturity before engaging suppliers. Certification gives you a credible, verifiable answer.
Shield EmojiVector representation of Shield emoji

Protect sensitive data

Every tier implements real, tested controls that reduce your exposure to the most common attack vectors — phishing, ransomware, email compromise, and credential theft.
Bar Chart EmojiVector representation of Bar Chart emoji

Improve insurance outcomes

Cyber insurers increasingly ask for structured evidence of security controls. A current SMB1001 certificate gives underwriters something concrete to assess.
High Voltage Sign EmojiVector representation of High Voltage Sign emoji

Reduce costly downtime

A breach isn't just an IT inconvenience — it's lost trading days, emergency response costs, and reputational damage. Structured controls reduce the likelihood and severity of incidents.
Chart with Upwards Trend EmojiVector representation of Chart with Upwards Trend emoji

Scale with confidence

The tiered model grows with your business. Start with Bronze fundamentals today, and progress to Gold or beyond as your client requirements and ambitions evolve.
Earth Globe Asia Australia EmojiVector representation of Earth Globe Asia Australia emoji

Globally recognised

SMB1001 is internationally certified — whether you're servicing clients in Sydney, Singapore, or San Francisco, your certification signals security maturity across borders.
THE SMB1001 CERTIFICATION LADDER

Start where you are. Grow as you need.

LEVEL 1

Bronze
Self-assessed
  • Managed IT support
  • Firewall (network + device
  • Antivirus / EPP
  • Automatic patching
  • Daily encrypted backups
  • Basic cyber awareness training
  • Excelium: Foundation setup & assessment

LEVEL 2

Silver
Self-assessed
  • All Bronze controls
  • MFA on email accounts
  • SPF email authentification
  • DMARC policy configured
  • Third-party agreements
  • Password policies
  • Excelium: Email security & MFA rollout​

LEVEL 3

Gold
Self-assessed
  • All Silver controls
  • EDR on all devices
  • DKIM email signing
  • MFA on all business apps
  • Incident response plan
  • Asset register + AI policy
  • Asset register + AI policy
  • Excelium: EDR, policies & governance docs

LEVEL 4

Platinum
IVO audit required
  • All Gold controls
  • Vulnerability scanning
  • Encryption at rest
  • External IVO audit
  • Enhanced governance
  • Excelium: Audit preparation & scanning

LEVEL 5

Diamond
IVO audit required
  • All Platinium controls
  • Penetration testing
  • IR drills & rehearsals
  • Suppliers due diligence
  • Continuous improvement
  • Excelium: Full programme management

SMB1001 aligns with the Australian Essential Eight, UK Cyber Essentials, US CMMC, and ISO 27001 — your certification supports multiple frameworks simultaneously.

Get started today

Ready to prove your security posture?

Book a free, no-obligation gap assessment with an Excelium consultant. We’ll show you exactly where you stand and what it takes to reach your target certification tier.

🔒 No obligation. No sales pressure. Just a clear picture of your security posture.

Speak With an Expert
Dan Vagulans
Principal Cyber Security Consulting | CSCC

Discover Our Other Service Lines

Specialist Resource Placement

Consulting