DLC LegalDLC Docs
Back to portal

DLC Legal cyber essentials

The Essential SMB1001 Cyber Document Pack

Choose seven coordinated Silver policies or the complete ten-policy Gold suite. Build them in your preferred order and in your own time with shared answers carried across your package.

For SMBiT members and MSPs

Resell the pack to your client base

Commission scales at 10%, 15% or 20% by licences sold in each DSI year.

Apply to resell

Choose your package and business size

Straightforward, fixed-fee pricing

Silver includes seven policies mapped to Bronze and Silver requirements. Gold adds three policies for the full ten-policy suite.

Band 1

Sole practitioner, no staff

For a sole practitioner operating without employees.

12-month licence

$544.50incl. GST
  • 7 Silver policies
  • Complete in your priority order
  • Save, return and download each policy
Most popular

Band 2

Micro firm, 2 to 5 people

For micro firms with a small team.

12-month licence

$660incl. GST
  • 7 Silver policies
  • Complete in your priority order
  • Save, return and download each policy

Band 3

Small firm, 6 to 10 people

For established small firms with growing responsibilities.

12-month licence

$880incl. GST
  • 7 Silver policies
  • Complete in your priority order
  • Save, return and download each policy

Band 4

Medium firm, 11 to 50 people

For medium firms with broader teams and systems.

12-month licence

$1,100incl. GST
  • 7 Silver policies
  • Complete in your priority order
  • Save, return and download each policy

Band 5

Large firm, 51+ people

For larger firms with more complex teams, systems and obligations.

12-month licence

Price on application
  • Silver or Gold package
  • Complete in your priority order
  • Save, return and download each policy
Contact us

All prices are in Australian dollars and include 10% GST. A one-year licence runs for 12 months from payment. A three-year licence runs for 36 months from payment, with the price locked for that term. There is no automatic renewal, and we send a reminder three months before the licence ends.

For SMBiT members and MSPs

Resell the pack to your client base

Commission scales at 10%, 15% or 20% by licences sold in each DSI year.

Apply to resell

Complete at your own pace

You choose to complete one included policy at a time and download it immediately, or work through your whole package at once.

Silver and Gold coverage

The complete SMB1001 cyber suite

Silver includes the seven policies marked Silver + Gold. Gold includes all ten. Shared business details are entered once and reused wherever they apply.

Does the cyber pack cover what I need?

Describe the cyber policy or control you need and we’ll check the ten core policies below.

Technology Management

Policies for secure systems, information, networks, software updates and responsible AI use.

  • Cybersecurity PolicyGold
  • Information Security PolicySilver + Gold
  • Network Security PolicySilver + Gold
  • Patch Management PolicySilver + Gold
  • AI Use PolicyGold

Access Management

Rules for controlling and reviewing access to accounts, systems and information.

  • Access Control & Authentication PolicySilver + Gold

Backup & Recovery

A practical policy for protected backups and reliable recovery.

  • Data Backup PolicySilver + Gold

Policies, Processes & Plans

Operational policies and plans for incident response, assets and payment verification.

  • Cyber Incident Response PlanGold
  • Physical Security & Asset Management PolicySilver + Gold
  • Payment Authorisation & Invoice Verification ProcedureSilver + Gold

Education & Training

There is no Education and Training document in this pack. Businesses that would like help developing training and education may contact DLC Legal for professional support.

If your business requires additional tailoring of any policy beyond the standard questionnaire, or you would like legal support in implementing or reviewing your documents, DLC Legal can assist. Request support by emailing enquiries@dlclegal.com.au, and the team will confirm scope, timing and a fixed fee before any work begins.

Add policies to either Silver or Gold. Prices include GST: $175 each, any 3 for $495, any 5 for $750, or all 8 for $1,095.

No add-ons selected

Choose one or more policies above.

The pack’s policy wording and mappings have been reviewed against SMB1001:2027. Controls are traced to named policies and clauses, with requirements that sit outside the policy documents flagged so nothing is missed.

SMB1001:2027 aligned

Governance that supports cyber security maturity

Current standard: SMB1001:2027, fourth version, formally published 1 September 2026.

SMB1001 recognises that effective cyber security depends on documented governance, clear responsibilities and repeatable response processes—not technology alone.

SMB1001 is a cybersecurity certification standard designed specifically for small and medium-sized businesses. It sets out practical cyber security measures that organisations can implement and be certified against.

The standard defines five maturity levels, Level 1 to Level 5. Level 1 requires seven controls and Level 5 requires forty-four. Each level builds on the one before it, so a business can improve progressively rather than implementing everything at once.

Most businesses start at Level 1 or Level 2. Once the controls in the chosen level are implemented and evidence of compliance is maintained, certification can be obtained. Levels 1 to 3 can be self-attested, while Levels 4 and 5 require independent third-party assessment.

A certification remains valid for one year from its date of issue. Certification or recertification sought after a new edition is formally published must meet the edition current on the application date.

Governance & accountability

Defines acceptable behaviour, decision rights and responsibilities for technology and information use.

Incident readiness

Establishes an organised response process for suspected data breaches and cyber incidents.

People & awareness

Gives personnel practical rules for AI, systems, data handling and escalation of concerns.

Third-party risk

Supports consistent assessment and contracting when suppliers access systems or information.

Five security domains

Controls sit across Technology Management, Access Management, Backup and Recovery, and Policies, Processes and Plans, together with Education and Training — covering people, process and technology.

Implementation path

Choose the level that suits your size, revenue and capability, implement its controls with the detailed guidance in Annex A, and maintain evidence of compliance.

Technical Support Specialist

The standard's first control requires engaging a Technical Support Specialist, who verifies each control is implemented correctly and certifiably, helping avoid costly remediation. Businesses with an existing MSP or IT provider are encouraged to work with them measure by measure.

Current-edition recertification

Certification lasts one year from issue. A later certification or recertification must meet the standard current when the application is made. The pack supplies the documented governance layer; IT support and cyber insurance sit outside the policy documents.

The pack supports evidence of governance controls relevant to SMB1001. Certification or full compliance may require additional technical, operational and assurance measures specific to your business.

Ready to strengthen your foundations?

Choose the pack for your business size.