13/08/2026
With Essential Eight being retired and replaced over the next couple of years, it is a question that has come up a bit lately: is there something else we should be looking at instead?
One name that has popped up is SMB1001, a tiered cyber security standard built specifically for SMBs. Our take: it is less about picking one over the other and more about what problem you are trying to solve.
The big thing SMB1001 has going for it is a real certificate at the end that you can submit to an insurer, a client or a tender panel. Essential Eight was never really built to give you that.
We break down what SMB1001 actually is, how it compares to Essential Eight and what certification costs in practice.
Worth a read if any of this sounds familiar 👇
SMB1001 vs Essential Eight: what is the difference, what it costs and whether your business needs it - a guide for Australian SMEs.