Brisbane MSP Earns SMB1001 Gold Cybersecurity Certification

XCD IT has earned SMB1001 Gold Certification for Cybersecurity and confirmed full alignment with the ASD Essential Eight framework – two of the most recognised cybersecurity benchmarks available to Australian small and medium businesses.

A Verified Cybersecurity Certification Standard for SMBs

SMB1001 Gold is the highest tier of the Council of Small Business Organisations Australia (COSBOA) cybersecurity certification, and XCD IT has earned it to verify that its security practices meet a stringent standard for protecting small and medium businesses.

For businesses in Brisbane, the Gold Coast, Sunshine Coast, and Sydney looking for managed IT support with independently verified cybersecurity, it is a clear signal that XCD IT’s controls have been assessed across data protection, access management, incident response, and staff awareness.

Alongside SMB1001 Gold, XCD IT has confirmed full alignment with the ASD Essential Eight, the Australian Signals Directorate’s prioritised mitigation strategies for defending against common cyber threats.

That matters for SMBs that often lack in-house IT resources but still need enterprise-grade protection they can trust.

This article explains what SMB1001 Gold means, how Essential Eight alignment strengthens that standard, and how XCD IT delivers managed IT services including cybersecurity, cloud solutions, Microsoft 365, monitoring and maintenance, IT strategy and planning, and secure AI training.

Together, these two benchmarks place XCD IT among a limited number of managed service providers in the region able to demonstrate independently verified cybersecurity compliance at this level.

“Achieving SMB1001 Gold isn’t just a badge – it’s proof that the security practices we put in place for our clients hold up to independent scrutiny,” said Jack Richards, XCD IT. “Smaller businesses deserve the same level of protection larger enterprises take for granted, and that’s what this certification confirms we’re delivering.”

Enterprise-Grade Protection and Improved Security Posture Delivered to Local SMBs

Operating as a virtual IT department for small and medium businesses, XCD IT serves clients across Brisbane, the Gold Coast, Sunshine Coast, and Sydney.

With more than 20 years of operational experience, the company provides IT infrastructure, security monitoring, and strategic technology planning to organisations that typically lack the internal resources to manage these functions in-house.

The dual achievement of SMB1001 Gold Certification and Essential Eight alignment reflects a deliberate effort to bring enterprise-grade security governance within reach of smaller organisations.

For SMBs in sectors where data handling and regulatory compliance carry real consequences, working with a provider that holds independently verified credentials carries practical weight beyond marketing claims, and SMB1001 Gold can also support procurement due diligence as a competitive advantage for small and medium sized businesses.

At AUD $395 per year, SMB1001 Gold is a cost effective cyber certification.

Compliance with the SMB1001 standard can simplify cyber insurance applications and may help reduce premium rates.

What SMB1001 Certification and Essential Eight Certification Actually Involve

SMB1001 is administered by Dynamic Standards International, the organisation behind the standard, and progresses across five tiers – Bronze, Silver, Gold, Platinum, and Diamond – with each level requiring a broader and more rigorous set of controls than the last.

The standard comprises a five tier, structured pathway that provides a clear roadmap for the cybersecurity journey of small and medium sized businesses, and each tier builds on the previous one.

It is a certifiable standard and a recognized cybersecurity certification for small and medium sized businesses, updated annually to address evolving threats.

It also aligns with international standards, including UK Cyber Essentials. Compared with an information security management system like ISO 27001, it is less complex and less costly for SMBs.

Reaching Gold means certification is self-attested by a company director, with Director Self-Attestation verifying compliance through documented evidence and not requiring external audits. Certification is valid for twelve months and requires annual renewal.

Gold also requires 27 specific cybersecurity controls spanning technology management, access control, backup and recovery, governance, staff training, multi-factor authentication, a signed cybersecurity response plan for any cyber incident, and a Digital Asset Register showing where corporate and customer private information resides.

This helps improve security maturity and manage risk, but it does not eliminate vulnerabilities or human error.

Most businesses reach SMB1001 Gold in one to six months, making Gold a practical stepping stone toward higher cybersecurity maturity.

The Essential Eight, maintained by the Australian Signals Directorate, takes a narrower but deeper approach, focusing on eight technical mitigation strategies proven to stop the most common attack techniques.

Holding both credentials signals that an MSP’s security practices are backed by structured technical controls and broader organisational governance.

The Gold level strengthens security maturity and cybersecurity posture, while higher levels like Platinum and Diamond move to external audit requirements – a combination insurers and regulators increasingly expect to see.

AI Solutions and Hands-On Training

Beyond its cybersecurity credentials, XCD IT has been expanding its offering to include AI solutions and structured, hands-on AI training for Australian SMBs.

The training focuses on how teams can integrate AI tools into daily operations without compromising data security or compliance obligations.

Employee training is made an explicit part of the company’s cybersecurity practices to ensure teams maintain good cybersecurity and support cyber resilience while adopting new tools.

Programs are structured around the security controls already in place under the company’s Essential Eight alignment. This approach ensures productivity gains don’t introduce new vulnerabilities and helps teams manage security risk while using AI responsibly.

About XCD IT

XCD IT is a Brisbane-based provider of managed IT services, delivering IT support, cybersecurity, and AI solutions to small and medium businesses across Brisbane, the Gold Coast, Sunshine Coast, and Sydney, including clients seeking smb1001 certification outcomes and a stronger long-term security posture.

Operating as a virtual IT department since 2005, the company offers a practical, scalable security and technology service for small and medium sized businesses, allowing businesses to strengthen cyber security without the burden of heavier enterprise approaches or frameworks such as cybersecurity maturity model certification.

XCD IT can begin with a gap assessment to map current security controls against the Gold controls needed to meet the standard and improve readiness against cyber attacks.

Cybersecurity Practices at XCD IT

XCD IT’s cybersecurity practices are built around a structured approach that aligns with the robust security requirements of the SMB1001 Gold level certification.

Developed by Dynamic Standards International, this certification process ensures that XCD IT implements a comprehensive set of 27 specific cybersecurity controls designed to reduce risk and improve security maturity for small and medium businesses.

The company’s practical guide to cybersecurity integrates many other standards, including traditional standards and the Australian Signals Directorate’s Essential Eight, providing a competitive edge for clients looking to demonstrate certified cybersecurity compliance.

This structured approach includes multi-factor authentication, endpoint detection and response, antivirus software, and automatic updates to maintain continuous protection.

XCD IT’s role as an IT provider extends beyond technical measures; it includes director attestation requirements where a company director must simply sign off on the cybersecurity posture annually, affirming the organisation’s commitment to maintaining gold level certification.

This process not only streamlines the certification process but also supports cyber insurance applications by meeting insurer expectations, potentially reducing premiums.

By adopting dynamic standards and maintaining alignment with SMB1001 Gold, XCD IT helps clients establish a resilient cybersecurity foundation while offering ongoing monitoring, staff training, and incident response planning.

This combination of technical controls and governance practices ensures that clients benefit from a robust security framework tailored to the specific needs and resources of SMBs.

In summary, XCD IT’s cybersecurity practices provide a structured, certified, and dynamic approach to protecting small and medium-sized businesses, helping them gain a competitive edge in their markets while effectively managing cyber risks.