SMB1001AU SMB scheme · 5 maturity levels 

SMB1001 certification, all five levels.

SMB1001 is the Australian SMB cybersecurity certificationbuilt for businesses too small for ISO 27001 and too large to wing it. Cyber Aware's awareness training, phishing simulations, and policy controls cover every level - from Bronze to Diamond.

WHAT IS IT?

The Australian SMB cybersecurity certification.

SMB1001 is a five-level cybersecurity maturity scheme built specifically for Australian SMBs. Designed by the Council of Small Business Organisations Australia, recognised by insurers and government tenders. Lower friction than ISO 27001, higher rigour than a self-attestation.

BRONZE
L1
BRONZE
For start-ups & micro-businesses · 8 controls
SILVER
L2
SILVER
Basic hygiene baseline · 18 controls
GOLD
L3
GOLD
Common SMB target · 32 controls
PLATINUM
L4
PLATINUM
Insurance-grade · 48 controls
DIAMOND
L5
DIAMOND
Full posture · 64 controls
HOW WE MAP

All five levels, human-risk controls covered.

SMB1001 places cyber awareness training in the foundational tier - required from Bronze onward. Cyber Aware fully addresses the awareness, phishing, and policy controls across every level.

Control area
Br
Si
Gd
Pt
Di
Cyber awareness training
Phishing simulation programme
-
Acceptable Use Policy
Password / MFA policy
Incident response training
-
-
Tabletop exercise (annual)
-
-
-
Privileged user training
-
-
Board / exec briefing
-
-
-
WHY MSPS LEAD WITH SMB1001

The certification SMBs actually buy.

SMB-priced, SMB-paced.

Lighter than ISO 27001. Tiered so a 5-person business and a 500-person business can both find the right level.

Insurance recognised.

Australian cyber insurers offer premium reductions for Platinum and Diamond level certified businesses.

Government tender ready.

Increasingly accepted as alternative evidence for federal and state government supplier requirements.

One-click upsell path.

Bronze → Silver → Gold → Platinum → Diamond. Every level a natural conversation with your client.

Get audit-ready

One platform.
Every framework.

Spin up a fully branded compliance assessment portal under your name. Evidence collected automatically as learners complete training.