SMB1001 certification, done with you

SMB1001 is a tiered cyber security standard built specifically for small and medium businesses, as a practical alternative to starting with an enterprise framework like ISO 27001. Dynamic Standards International publishes and maintains the standard, and CyberCert operates a certification pathway. The current edition is SMB1001:2026.

The five tiers are Bronze, Silver, Gold, Platinum and Diamond. Bronze, Silver and Gold are director attestable, while Platinum and Diamond require external validation. The right target depends on the information you handle, the access you hold, service criticality and the requirements of clients, contracts, insurers or procurement teams. We recommend a tier only after a readiness discussion.

No. The Essential Eight is a set of technical mitigation strategies and does not itself provide SMB1001 certification. SMB1001 adds tiered governance, policy, training and assurance requirements. Some implementation work can support both, but you still need to check each framework against its own authoritative requirements.

CyberCert's current certification fees vary by tier and should be confirmed directly in its platform. The larger variable is the work required to close the organisation's control and evidence gaps. VibeZero quotes guided implementation after a readiness chat, with scope agreed before commencement.

VibeZero is a CyberCert partner and holds SMB1001 Silver certification, so we have worked through the standard as a certified organisation. We help assess gaps, implement controls, prepare policy and training, and organise the workbook. CyberCert remains the certifier and issues the certificate.

We are Perth based and work in person across the metro area, and we support businesses Australia wide remotely.