SMB1001 explained: the cyber certificate insurers and tenders now ask for
SMB1001 is an Australian tiered cybersecurity certification for small and medium businesses, running from Bronze and Silver through Gold, Platinum and Diamond. Insurers, tenders and larger partners increasingly ask for it. LYD Assist runs the gap analysis and closes the gaps; the certificate itself is issued by the certifying body.
A new line is appearing in insurance renewals, tender documents and supplier questionnaires. Prove your cybersecurity. For a lot of care providers, the honest answer today is that they cannot, not because they are careless, but because nobody asked before.
SMB1001 is the credential filling that gap in Australia.
What SMB1001 is
SMB1001 is a cybersecurity certification designed specifically for small and medium businesses. It is tiered, so you do not have to leap to enterprise grade on day one. It covers five practical areas: technology management, access control, backup and recovery, policy, and staff training.
| Tier | What it signals |
|---|---|
| Bronze and Silver | Fundamental controls in place, self assessed |
| Gold | Independently verified, with real governance and training |
| Platinum and Diamond | Advanced, continuously monitored security maturity |
Why you are being asked for it
- Cyber insurance. Insurers tighten their criteria every year. Documented controls mean a better application and, often, a better premium.
- Tenders and contracts. Government and larger organisations check supplier security before they sign.
- Regulatory alignment. It maps to Privacy Act obligations and the data breach scheme, so it does double duty.
SMB1001 or ISO 27001?
ISO 27001 is the global standard, but it is a heavy lift for a small provider. SMB1001 is the right sized entry point. Start where you are, and the work you do at the higher tiers builds directly toward ISO 27001 if you ever need it.
How LYD Assist helps
We run a gap analysis against SMB1001 or ISO 27001, write the policies and incident plan you are missing, and help you close the gaps. The certificate itself is issued by the certifying body, not by us. We do the preparation and the paperwork so you pass. This sits inside our cybersecurity and secure AI service, and pairs naturally with a Security Health Check as the starting point.
Frequently Asked Questions
What is SMB1001?
Do care providers need SMB1001?
How is SMB1001 different from ISO 27001?
Asked for a security credential?
Book a free demo and we will scope your gap analysis against SMB1001 or ISO 27001.
Run an NDIS business?
LYD AssistOS is the website and growth system behind this site. Published pricing, no quote to chase.
Prefer to talk to a real person in Sydney and Melbourne first? No scripts, no pressure.
- growth@lydassist.com
- Sydney: Level 1, 244 Macquarie St, Liverpool NSW 2170
- Melbourne: Suite 383, 11 Wilson St, South Yarra VIC 3141
- Monday to Friday, 9am to 6pm AEST
