# SMB1001 support [Read the public page](https://www.adarkcloud.com.au/services/smb1001-support) Prepare for SMB1001 with a scoped gap review, practical improvements and evidence. Perth based support with remote work across Australia. SMB1001 support helps a small business prepare its environment, working practices and evidence for the applicable certification requirements. A Dark Cloud Creative can scope preparation work from Perth with remote support across Australia. Certification and any independent assessment are separate processes. Perth based, with remote support across Australia. From $79 an hour ex GST, with the fee agreed before work begins. Call Josh C on 0408 530 303. ## What we can help with - Requirement and applicable edition review - Scoped readiness and gap register - Practical implementation planning - Policy and evidence preparation - Certification handover responsibilities A customer may ask for SMB1001 when deciding whether to trust a supplier with systems or information. Start with the requirement they have supplied and the level they expect. We can help establish the preparation work without promising a certificate or representing our service as an authorised certification body. ## Confirm the standard and requested result SMB1001 is a security certification standard for small and medium businesses, maintained by Dynamic Standards International. DSI currently identifies the 2026 edition and a pathway with five levels. We confirm the applicable edition, requested level and business scope during the initial review. A customer's actual requirement is more useful than choosing a level solely because its name sounds reassuring. ## Keep preparation separate from certification DSI maintains the standard and identifies CyberCert as its current certifier. Certification requirements and any independent assessment depend on the selected pathway. Our proposed work concerns preparation and implementation within an agreed scope. It does not confer certified status, promise the outcome of an assessment or claim that A Dark Cloud Creative holds an assessor or partner credential. ## Review gaps against the agreed requirement We establish the relevant systems, existing practices and evidence available to the business. The gap register should distinguish an implemented setting, a policy awaiting approval and a requirement that still needs specialist input. Access to the applicable standard and its use requirements need to be confirmed. We do not reproduce a licensed control list as a substitute for the official requirements. ## Scope the changes your business needs Preparation may involve updates, access changes, backup checks or policy work. Each job needs a responsible person, an approval path and evidence that can be followed. The business approves the scope and fees before implementation. Subscriptions, standard access, certification and external assessment charges should be identified separately where they apply, rather than assumed to be included in support. ## Make the evidence accurate and usable The evidence record should describe what was checked, which systems were covered and which gaps remain. A written rule does not by itself show that staff follow it or that a setting operates. The business retains responsibility for its statements and approvals. We can help organise the handover without answering a certification question as passed when its evidence is incomplete. ## Plan for maintenance and further review The preparation record should name who maintains the controls and responds to changes in staff or software. We confirm current certification and review requirements with the relevant provider. Suitable workshops and configuration work can be remote across Australia. Perth physical work, independent assessment and any additional specialist advice have separate responsibilities to agree before the engagement begins. ## Common questions ### Will you issue our SMB1001 certificate? No. We scope preparation and implementation help. The relevant certification provider controls certification, and any independent assessment needs to be arranged through the applicable process. ### Which SMB1001 level do we need? Bring the customer, insurer or business requirement to the review. The applicable edition, systems in scope and consequences of your work inform the preparation brief and selected pathway. ### Does SMB1001 prove we meet Essential Eight or Essentials? A result under one framework does not automatically establish an outcome under another. We review the actual requirement, assessment method and evidence expected. Keep any separate Essential Eight or ASD Essentials assessment explicit. ### Can we prepare remotely from outside Perth? Much of the documentation and configuration work can be remote across Australia. Physical checks and external assessment requirements are established separately for the environment and pathway involved. ### A customer or tender has asked for SMB1001. Where do we start? Send the request wording and the due date. Josh C confirms which SMB1001 level and edition it refers to, checks your current setup and plans the preparation work before you apply for certification. ## Useful next steps - [IT policies](https://www.adarkcloud.com.au/services/it-policies) - [Vulnerability management](https://www.adarkcloud.com.au/services/vulnerability-management) - [Security remediation](https://www.adarkcloud.com.au/services/security-remediation) - [Patch management](https://www.adarkcloud.com.au/services/patch-management) - [Essential Eight support](https://www.adarkcloud.com.au/services/essential-eight) - [SMB1001 from Dynamic Standards International](https://dsi.org/) - [The Essential Eight for small business owners](https://www.adarkcloud.com.au/blog/the-essential-eight-what-perth-business-owners-need-to-know) - [Understand the ASD Essentials release](https://www.adarkcloud.com.au/blog/asd-essentials-small-business) Reviewed 2026-10-15 - [Ask for IT help](https://www.adarkcloud.com.au/contact) - [Check your IT basics](https://www.adarkcloud.com.au/tools/it-health-check)