Qbit IT Services

Cyber Security Services Perth -- SMB1001 Gold Certified

Our cyber security risk assessments provide a clear view of your organisation’s security maturity, identifying gaps across people, processes, and technology. Leveraging our proficiency in Essential Eight alignment, as well as experience supporting SMB1001, we assess the effectiveness of your existing security controls and governance frameworks. The assessment delivers practical, risk-based recommendations to strengthen your security posture, improve resilience, and support ongoing compliance with relevant regulatory and contractual obligations.

What sets Qbit apart is their genuine commitment to partnership. They don’t just provide IT services—they become an extension of your team. Their technicians are knowledgeable, approachable, and always go the extra mile. Qbit has proven to be a trustworthy partner and we highly recommend Qbit IT Solutions to any business in the mining and resources sector.

Tim Topham

Managing Director, Topdrill

Cyber Security

Our cyber security approach is built on the SMB1001:2026 standard, providing a robust and proven framework to protect businesses from modern threat actors. This standard delivers a practical and measurable way to improve cyber resilience while remaining appropriate for small and medium organisations.

Qbit IT Solutions offers a comprehensive range of security risk assessments delivered by experienced security professionals. Each engagement is tailored to your business environment, risk profile, and operational needs, ensuring outcomes that are both relevant and actionable.

Protecting Your Business with Certified Excellence

Qbit achieved ISO 27001 Cyber Security Certification in 2024, the world’s leading international standard for information security management. This certification demonstrates our unwavering commitment to protecting sensitive data, both within our organisation and across our customers’ businesses. Further reinforcing our dedication to excellence, Qbit has also been awarded the SMB1001 Gold Certification, recognising our strong business practices, governance, and commitment to sustainable growth.

Certifications & Awards

ISO Certifications Qbit is certified across internationally recognised ISO standards, demonstrating our commitment to quality, information security, workplace safety, and environmental responsibility. Our certifications provide clients with confidence that their IT services are delivered to the highest standard.

Learn more

MSPau Select 2026 Recognised in Cloudtango’s MSP Select rankings, Qbit is acknowledged as one of Australia’s leading managed service providers. This award reflects our focus on innovation, cyber security excellence, customer service, and delivering measurable business outcomes.

Learn more

SMB1001 Gold We are proud to have achieved SMB1001 GOLD CyberCert certification, demonstrating our commitment to cybersecurity best practices and protecting the information entrusted to us. This independently recognised certification validates that our business has implemented essential security controls and follows a structured approach to managing cyber risks, giving our clients, partners and stakeholders greater confidence in the way we operate.

Learn more

Compliance and Assurance

Organisations are under increasing pressure to demonstrate compliance with recognised cyber security standards and government frameworks. SMB1001:2026 incorporates global best practices and aligns closely with leading frameworks including the Australian Essential Eight, UK Cyber Essentials, and the US Cybersecurity Maturity Model Certification.

Our team has proven proficiency in Essential Eight alignment, supporting businesses to understand their maturity level and implement practical controls that reduce real-world risk. We also hold a SMB1001 Gold Certification ourselves.

We have worked with organisations seeking to improve their cyber security maturity and align their ICT environments with the requirements of SMB1001 and DISP-related cyber security obligations.

Cyber security is now an accepted part of doing business. Regular security assessments play a critical role in managing risk, as last year’s assessment only reflects last year’s threat landscape. The SMB1001 standard includes a yearly certification, helping your organisation maintain assurance and remain protected as threats and technologies continue to evolve.

Our Approach

Our security risk assessment services take a business-driven approach to evaluating your cyber security maturity. Assessments are based on how your organisation actually operates, the data you value most, and the risks that matter to your business.

This provides a clear and pragmatic way to understand your current security posture, benchmark progress, and identify targeted areas for improvement. This approach enables informed decision making, prioritised investment, and measurable uplift in cyber resilience over time.

Cyber threats aren't just affecting large enterprises

Australian businesses face a constantly evolving cyber threat landscape, with the Australian Cyber Security Centre receiving more than 87,400 cybercrime reports in 2023-24, averaging one report every six minutes. Taking proactive steps today can significantly reduce your risk and help protect your business, staff, and customers.

Protect your business before an incident occurs.

Name(Required)

First Last

Email(Required)

Phone(Required)

Top priority assessment

General IT asset environment

Cyber security resilience

Cloud-first adoption and Microsoft licensing

Windows 11 and managed operating environment adoption

Big-data and Azure assisted migrations

Wireless performance optimisation survey

Phone system and Unified communication

Network cabling testing (fiber, ethernet)

CAPTCHA

Your Managed Services IT company needs to have well thought out processes and procedures to help you protect your business from those cyber security threats and criminals that only care about getting your money. This is why Qbit aligns its clients with the standards outlines by SMB1001:2026 and ISO27001

Cyber security is a journey here is the strategic roadmap to build resilience.

Bronze is the lowest level of cyber maturity. We recommend this standard as a minimum of all business additional remote office/branch offices.

6 control requirements

Key deliverables:
– Have access to IT professionals
– Site protection with an edge firewall or security appliance
– Endpoint protection on all devices (laptop, desktop, mobile and servers)
– Quality password that change regularly
– Backup and restore point of important assets, typically Microsoft 365 users and on-prem servers
Silver is a moderate level of cyber maturity, good cyber hygiene and a basic policy adoption. Ideally starting point for small businesses with low to moderate dependencies on IT systems for day-to-day operations.

14 control requirements

Key deliverables, in addition to Bronze-level:
– Certificate that validated business maturity for 12-months
– Website protection on all public facing websites
– All employees have a named account
– Define standard account and privileged/administrative accounts
– No local administrative rights on standard accounts
– Password management system
– Multifactor Authentication (MFA) for email services
– HR policy document for confidentiality agreement for all employees
– Finance policy and procedure to prevent invoice fraud
– Per site visitor register
Gold is a good level of cyber maturity, hygiene and policy adoption. Ideal for a SMB that have a matured operation where data is valued.

23 control requirements

Key deliverables, in addition to Silver-level:
– Certificate that validated business maturity for 12-months
– Patch management on all servers**
– Multifactor Authentication (MFA) for business applications and social media accounts
– Implemented a cyber security policy
– Implemented a response plan for cyber, backup, business continuity and disaster recovery plans
– Retention lifecycle, Secure methods of physical document destruction
– Device lifecycle, ensure all devices with sensitive, private and/or confidential information are disposed of securely
– Regular cyber security awareness training for all employees
Platinum is for advanced and highly matured businesses. Where sensitive data where risk is mission critical.

Ideal when you have cyber insurance, work with government agencies and/or international businesses where supply-chain risk auditable.

28 control requirements

Key deliverables, in addition to Gold-level:
– Certificate that validated business maturity for 12-months
– Black box/Grey box penetration testing for public facing websites (Web App and Databases)
– Management of remote access cloud credentials
– Multifactor Authentication (MFA) for data at rest
– Multifactor Authentication (MFA) for remote access (VPN and RDP technologies)
– Valid and up-to-date cyber insurance policy
Diamond is the highest level on the SMB1001:2026 standard near equivalent to ISO:27001.

35 control requirements

Key deliverables, in addition to Platinum-level:
– Certificate that validated business maturity for 12-months
– Encryption of important data at rest
– Application control for all business apps
– Disable untrusted macros on Microsoft Office
– Black box/Grey box penetration testing, vulnerability for internal systems
– Social engineering testing
– Supply-chain trust program
– conduct police vetting on employees with administrative access
– Conduct training on test the incident response plan’s
The Essential Eight and NIST Cybersecurity Framework 2.0 are frameworks. They describe what good security looks like and leave the interpretation to you, which means two businesses can both claim alignment and have very different security in place. Neither can be certified. There is no audit, no certificate and nothing to hand a client or an insurer.

SMB1001 is a standard. It sets out specific, testable requirements across five graded levels, and it is certifiable — you either meet the level or you do not. It was written in Australia for small and medium businesses, drawing on the same frameworks, and it includes controls that neither the Essential Eight nor NIST CSF 2.0 covers.

For most Perth businesses, this is the practical difference: a framework tells you what to aim at, while a certification is something you can prove. SMB1001 Level 5 covers the same ground as the Essential Eight and NIST CSF 2.0, and every level below it gives you a verifiable step on the way there.

Take a Qbit Managed Services agreement as presented and your business will meet the requirements for SMB1001 Silver, with the controls built into the service rather than sold separately. Read more about SMB1001