The same clients and insurers asking you to test-and-tag are starting to ask about cyber. We certify Canberra small businesses to the standards that actually matter — ACSC Essential Eight and SMB1001 — fixed-price, and quoted right alongside your electrical compliance.
Most small businesses don't need an enterprise security program — they need the essentials done properly and something they can show a client or insurer. That's what these deliver.
A gap assessment of your Microsoft 365 and devices against the ACSC Essential Eight at Maturity Level One. You get a plain-English RAG report, a prioritised remediation plan, and an attestation letter you can hand to clients.
ACSC Essential Eight (ML1)Certify your business to SMB1001 — the tiered Australian cyber standard built specifically for small business. A recognised badge you can show clients and insurers, renewed each year like your test tags.
SMB1001:2025 · Bronze → DiamondWe implement the fixes: multi-factor authentication and Conditional Access, application control, and patch & backup policy across your Microsoft 365 / Intune tenant. Scoped and fixed-price.
Essential Eight controlsOne monthly bill covering annual re-assessment, quarterly posture checks, monthly MFA/patch/backup verification — and your test & tag retests. One provider, one reminder, one invoice.
Essential Eight + AS/NZS 3760Most breaches of Australian small business come through email, weak passwords and unpatched laptops — exactly what the Essential Eight is designed to shut down, and exactly where an uncertified small business is exposed.
You already trust us on site for your electrical compliance. Adding cyber means one relationship, one visit, and one reminder schedule — not another vendor to manage.
Your assessment is done by a qualified Australian IRAP assessor — the same discipline used for government systems, right-sized and priced for a café, clinic or office.
Tell us your rough staff count and whether you run Microsoft 365. We come back with a fixed price — no lengthy discovery.
We assess against the Essential Eight, then fix the gaps in your tenant: MFA, patching, app control and backups.
You get your report, attestation and (if chosen) SMB1001 certificate — and a yearly reminder so you stay compliant.
The Essential Eight is a set of eight mitigation strategies published by the Australian Signals Directorate's ACSC. It covers application control, patching applications and operating systems, configuring Microsoft Office macros, user application hardening, restricting administrative privileges, multi-factor authentication and regular backups. Maturity Level One is the baseline appropriate for most small businesses.
SMB1001 is an Australian cyber security standard designed specifically for small and medium business. It is tiered (Bronze through Diamond) so you can start small and grow, it is certifiable at low cost, and it is increasingly recognised by cyber insurers and larger clients who need evidence that their suppliers take security seriously.
Most of our small business clients run Microsoft 365 Business, and the Essential Eight controls map almost directly to settings in Entra ID, Intune and Defender. If you run Google Workspace or something else we can still help — the assessment is tool-agnostic; the hardening step is where the platform matters.
An Essential Eight health check for a small business is typically about a day of assessment plus the remediation work. SMB1001 Bronze can often be achieved quickly once the basics are in place. We give you a realistic timeline with your fixed-price quote.
Yes — that's the point. You can add SMB1001 certification to your test-and-tag booking, and we coordinate both on one schedule with one invoice and one renewal reminder.
Tell us about your setup and we'll send a fixed-price quote — or add it to your next test-and-tag visit.
Request a cyber quote