SMB1001 and Essential Eight ML1 in one place.
Votan Labs works with managed service providers to take their clients through SMB1001 certification and Essential Eight Maturity Level 1. Structured questionnaires, evidence captured once per control, and client-safe reporting for both frameworks, so nothing lives in scattered spreadsheets.
Two frameworks, one source of truth.
This work is built for MSP owners, vCISOs, and compliance leads tracking SMB1001 and Essential Eight ML1 for the same clients.
- 01
MSPs are being asked to evidence SMB1001 tiers and Essential Eight ML1 for the same clients.
- 02
The 2026 SMB1001 update adds email authentication, EDR, and awareness training on top of existing criteria.
- 03
Two frameworks tracked in separate spreadsheets doubles the work and drifts out of sync.
- 04
The same control is captured twice, with no shared source of truth.
Four parts of the work.
The same structure applies to every client you bring through, so the work stays consistent as your client list grows.
- 01 · questionnaire
Structured questionnaires for both frameworks.
Every SMB1001 criterion and every Essential Eight ML1 control captured as a specific question with clear evidence requirements.
- 02 · evidence
Evidence captured once per control.
Documents, links, or screenshots are attached against the control they satisfy. Evidence belongs to the control, not to a framework.
- 03 · coverage
Shared coverage view.
Answer a criterion once and it contributes to both frameworks where they overlap. Each framework has its own view, kept in sync.
- 04 · reporting
Client-safe reporting.
Separate views for the client, the MSP, and auditors, for both SMB1001 and Essential Eight ML1.
Built alongside a working MSP.
This service grew out of working alongside an MSP running real SMB1001 and Essential Eight ML1 certifications for their clients. Every part of the process came from a specific need in that work.
We take on a small number of MSPs at a time so we can support each one properly.
This is a hands-on service, not a self-serve product. You work directly with the people doing the work.
Frequently asked questions
- SMB1001 is an Australian cyber security certification scheme for small and medium businesses. It has tiered levels (Bronze through Diamond) and is increasingly requested by insurers, supply chain partners, and customers. The 2026 update introduces additional requirements including email authentication, endpoint detection and response, and security awareness training.
Talk to us about compliance work for your MSP.
Tell us about your MSP and where SMB1001 and Essential Eight ML1 currently sit for your clients. We reply within one business day.