Frameworks · SMB1001
Coming soonSMB1001 readiness for small and medium businesses
SMB1001 readiness is coming soon to TrustProof: it will take you through the five tiers of the SMB1001 cyber security standard, Bronze to Diamond, up to the tier you are working towards. TrustProof does not issue SMB1001 certification: you apply through the SMB1001 scheme, and TrustProof will keep the evidence behind your application.
Key facts
What you can check
- Five tiers
- Items across Bronze, Silver, Gold, Platinum and Diamond, in TrustProof's own words. Tiers build on each other.
- Target tier
- You will choose the tier you are working towards. Items in higher tiers can be set aside with a justification until you aim higher.
- Built for small teams
- Plain-language questions about firewalls, patching, MFA, backups, email security and staff training, without the overhead of a larger standard.
- Read-only AWS role
- TrustProof connects through a read-only IAM role you create from our CloudFormation template and can remove at any time. No passwords, no stored keys.
- Hosted in AWS Sydney
- TrustProof runs on AWS in the Sydney region (ap-southeast-2), encrypted at rest and in transit.
What TrustProof does
- Will walk you through each tier with plain-language questions
- Will record your target tier and what is still open before you apply
- Will track policies, backups, training and insurance evidence with review dates
- Will collect AWS evidence through a read-only role where your business runs on AWS
- Will give your auditor their own dashboard at the audited tiers, with two-step verification
What TrustProof doesn't do
- TrustProof does not certify and does not issue SMB1001 certification; that happens only through the SMB1001 scheme.
- It is not legal or insurance advice.
- TrustProof is not affiliated with or endorsed by Dynamic Standards International or CyberCert.
FAQ
Frequently asked questions
Does TrustProof give us SMB1001 certification?
No. You apply through the SMB1001 scheme. TrustProof helps you get ready and keeps the evidence your directors and, at the higher tiers, your auditor need.
Which tier should we aim for?
Whichever your customers, insurer or contracts ask for. Many small businesses start at Bronze or Silver and move up; the higher tiers need an independent audit under the scheme rules.
Do we need to run on AWS?
No. Most SMB1001 items are about your devices, accounts, email and people, and you record those yourself. If you use AWS, the read-only checks add evidence for the parts that run there.
When will SMB1001 readiness be available?
It is coming soon. The free read-only AWS scan and One-Button Fix are available today. Talk to us if you would like to hear when it opens; this page will be updated when it does.
What does it cost?
The first AWS scan is free. One-Button Fix is A$1,499 one-off. Plans are a one-off Readiness Programme plus Continuous Monitoring from A$899 a month. All prices are in Australian dollars and include GST.