Essential Eight and SMB1001 for Melbourne Professional Firms

Q: Is Intuitive IT SMB1001 certified?

Yes. Intuitive IT holds SMB1001 Gold certification and is a CyberCert partner.

Q: Should our firm aim for Essential Eight or SMB1001?

Usually both. SMB1001 gives you a certificate built for firms of 10 to 200 staff. The Essential Eight is the Australian Government baseline many clients and insurers ask about. Intuitive IT takes you through SMB1001 certification and maps the same work to Essential Eight maturity levels.

Q: Do we need to be a managed IT client to get an assessment?

No. Intuitive IT runs one-off Essential Eight and SMB1001 assessments for firms that aren't managed IT clients.

Q: Is SMB1001 Gold independently audited?

No. At Bronze, Silver and Gold, a company director attests that the controls are in place. Platinum and Diamond add an independent audit.

Q: How does SMB1001 help with cyber insurance?

Certification gives you evidence of the controls in place, so you can answer an insurer's questionnaire with proof rather than ticked boxes.

Intuitive IT is SMB1001 Gold certified and a CyberCert partner. We take accounting practices, wealth and fund managers, law firms and recruitment agencies with 10 to 200 staff through SMB1001 certification, map that work to Essential Eight maturity levels, and run one-off assessments for firms that aren't clients yet.

Book a 30-minute IT risk conversation

Intuitive IT SMB1001 Gold certification badge

Home Essential Eight and SMB1001

What the Essential Eight is

The Essential Eight is the Australian Signals Directorate's baseline set of eight mitigation strategies: application control, patching applications, Microsoft Office macro settings, user application hardening, restricting administrative privileges, patching operating systems, multi-factor authentication and regular backups.

Each strategy is assessed against maturity levels from zero to three. The Essential Eight is guidance, not a certification, so there is no certificate to show a client or insurer. That is where SMB1001 comes in.

Ensure your servers are monitored and maintained with Intuitive IT

What SMB1001 is, and why we use it

SMB1001 is a cyber security certification standard written for small and medium businesses, published by Dynamic Standards International. It has five tiers: Bronze, Silver, Gold, Platinum and Diamond. Bronze, Silver and Gold are attested by a company director; Platinum and Diamond are independently audited. In Australia, certificates are issued through CyberCert.

Intuitive IT is a CyberCert partner and measures client security uplift against SMB1001, because it is built for firms your size and ends in a certificate you can show. We map the same work to Essential Eight maturity levels, so when a client, insurer or auditor asks about the Essential Eight, you have an answer. Intuitive IT holds SMB1001 Gold certification itself.

How Intuitive IT gets you there

From first assessment to certificate. Hover or tap each card for the detail. See our managed cyber security services for how we keep you there.

Assessment

Find out where you stand.

One-off assessment

A one-off Essential Eight and SMB1001 assessment shows where your firm stands today. You don't need to be a managed IT client.

Gap plan

Know exactly what's missing.

Gap plan

We set out the gaps between where you are and the SMB1001 tier you're aiming for, in priority order.

Uplift

The controls, actually in place.

Closing the gaps

We close the gaps in your devices, Microsoft 365, access and backups, so the controls are genuinely in place.

Certification

A certificate you can show.

SMB1001 certification

We take you through SMB1001 certification, so you finish with a certificate to show clients, insurers and auditors.

Essential Eight

An answer when you're asked.

Essential Eight mapping

The same work is mapped to Essential Eight maturity levels, ready for when a client or insurer asks.

We're certified

We hold ourselves to it too.

SMB1001 Gold certified

Intuitive IT holds SMB1001 Gold certification and is a CyberCert partner, so we meet the standard we take our clients through.

Questions about Essential Eight and SMB1001

Is Intuitive IT SMB1001 certified?

Should our firm aim for Essential Eight or SMB1001?

Do we need to be a managed IT client to get an assessment?

Is SMB1001 Gold independently audited?

How does SMB1001 help with cyber insurance?

Start with a 30-minute IT risk conversation

We'll ask about your firm, how your IT is run today and what's worrying the partners. You'll leave with a clear view of where your biggest IT risks sit, even if we don't end up working together.

Book a time

Latest from our blog

August 31, 2026

The Copilot Readiness Assessment I’d Run Before You Buy a Single Seat

We sell Microsoft licensing. So this is an awkward thing for me to write down, and I'm writing it anyway: if you buy Copilot seats this month and hand them out on Monday, you'll waste the money, and you might create a problem you didn't have. Not because the product's bad. It isn't. It's what happens in the fortnight before anyone types anything. What a Copilot licence actually does on day one Think about a ...

August 24, 2026

Do you need an AI governance framework?

Somewhere in your firm there's a document that says who can commit the firm to what. It might be called a delegation of authority schedule, or a signing matrix, or just "the approvals policy". It's been through the board. It says a senior associate can authorise up to a figure, that above another figure it needs two partners, and that certain things need you personally regardless of the amount. It's one of the oldest and ...

August 17, 2026

Someone Just Pasted a Client File Into ChatGPT

It's 4:40 on a Thursday. A senior associate has a client review at nine tomorrow. She's got eleven pages of file notes she hasn't read, and she's been sitting in other people's meetings since ten. She opens a browser tab, ChatGPT, the same one her nephew uses for his assignments. Select all, copy, paste. Then she types: "Summarise the key issues and flag anything that needs a decision." Four seconds later there's a clean one-page ...

All Blog Posts

Find out where your firm stands today

Get in touch