The Essential 8 is ASD’s framework — designed for medium-to-large organisations and government agencies. SMB1001 is the Australian framework specifically designed for small businesses, with five tiers (Bronze → Silver → Gold → Platinum → Diamond) so you can start small and progress.
Most SMBs we talk to who’ve heard of Essential 8 have given up on it because it’s overwhelming. Eight strategies, three maturity levels each — twenty-four assessable items, designed for organisations with dedicated security teams. SMB1001 is structured for the reality of a 10-person business: clear, achievable, certifiable in stages.
(see above)
We help businesses get to SMB1001 Bronze first — the entry tier, achievable in 60-90 days. Then plan the path to Silver and Gold over the following year. Bronze and Silver use director self-attestation; Platinum and Diamond require external audit. Most SMBs spend 2-3 years between Bronze and considering Gold.
Sources: ASD Essential 8; CyberCert / DSI SMB1001.
Want to talk through this in your specific business context? The first 30 minutes is free — phone or Microsoft Teams. Book a free 30-min scoping call →
