// sheep dog · smb1001 gold-in-a-box

SMB1001 Gold — done for you, in a box

An all-in-one cybersecurity and compliance solution built for Australian small businesses, so you can concentrate on what you do best. We implement the controls, run the oversight, and get you to SMB1001 Gold for a simple per-user monthly fee.

Fully managed  ·  may lower cyber-insurance premiums  ·  includes a cut-down Sheep Dog vCISO

// the standard

What is SMB1001 — and why Gold?

SMB1001 is a cybersecurity and compliance standard that helps small and medium businesses implement foundational security controls to protect against cyber threats and meet regulatory expectations. Its tiered levels run up to SMB1001 Gold — a high standard of security maturity for businesses that store and process sensitive data including PII, health, legal and financial information.

Achieving Gold demonstrates strong security measures — firewalls, endpoint protection, MFA, incident response planning and awareness training. Many insurers, regulators and enterprise clients prioritise working with SMBs that meet these benchmarks, making Gold a genuine differentiator for credibility and resilience.

// what's in the box

What's in SMB1001 Gold-in-a-Box

Technical support & network security

  • A dedicated specialist oversees implementation
  • Industry-leading next-gen firewall installed and configured
  • Server management, updates and patching
  • TLS certificates on all public-facing websites

Endpoint security & access controls

  • Enterprise SentinelOne anti-virus across all devices
  • Automated, tested patching
  • Restricted administrative privileges
  • Individual user accounts for accountability
  • MFA on email, business apps and social media

Backup & disaster recovery

  • A backup and recovery strategy for all critical data
  • Regular restore testing to prove recoverability

Policies, compliance & risk

  • Confidentiality agreements, cybersecurity policy and incident response plan
  • Invoice-fraud and financial controls
  • Visitor register, secure document destruction and device disposal
  • A digital asset register

Cyber awareness training

  • Online awareness training for all employees
  • Password-manager guidance and secure password practices
  • Routine password changes enforced

Sheep Dog vCISO (included)

  • A cut-down vCISO overseeing your SMB1001 policies and compliance
  • Works with you to achieve Gold certification
  • Expert guidance during incident response
// cyber insurance

Lower your cyber-insurance risk

Achieving SMB1001 Gold may significantly improve your ability to obtain cyber-insurance cover at competitive rates. Many insurers now require businesses to meet a minimum standard such as SMB1001 Silver or Gold before offering coverage. By implementing Gold, your business demonstrates proactive risk management and resilience — and our framework aligns with the risk controls insurers look for, reducing the likelihood of claim denials.

// why choose us

Why SMB1001 Gold-in-a-Box

Fully managed compliance

We handle everything from policy creation to security implementation — no compliance burden on you.

Expert-led security

Deep cybersecurity and regulatory expertise ensures a seamless path to Gold certification.

Ongoing monitoring

Continuous security monitoring, risk management and compliance updates keep you audit-ready.

Reduce risk & build resilience

A proactive approach prevents cyber threats while meeting SMB1001 requirements.

// faq

Your questions, answered

What is SMB1001 Gold?

A cybersecurity and compliance framework that helps SMBs implement strong security measures and meet regulatory expectations.

It depends on your size, existing posture and infrastructure, but most businesses achieve compliance within a few weeks to a few months.

Yes — we offer ongoing compliance support, security monitoring and managed services to keep you secure and certified.

Gold is tailored for SMBs — practical, scalable measures. It shares elements with ISO 27001 and ASD Essential 8 but is a streamlined path for smaller businesses.

It’s an all-in-one solution — technical components, oversight and advisory to meet the standard — managed for you for a simple per-user, per-month fee.

Our solution is all-inclusive and based on our technology stack. To keep it competitive and supportable, we provide and license all required items — including replacing an existing firewall or antivirus with technologies we’ve chosen from delivering security across enterprise and government.

No — SMB1001 Gold-in-a-Box is cybersecurity and compliance focused. We deploy and manage security tools and controls, but not general helpdesk/IT support. We can refer you to trusted IT providers if needed.

This includes a limited vCISO function (policy creation and compliance guidance for SMB1001 Gold, awareness training, and incident response support). The full Sheep Dog vCISO is a broader leadership and advisory offering covering governance, risk, vendor assessments and strategy.

// next step

Start with a free SMB1001 gap assessment

Identify your security gaps, understand your compliance status, and get started with Sheep Dog SMB1001 Gold-in-a-Box. Prefer the full programme? Explore the Sheep Dog vCISO.