YOUR QUESTIONS ANSWERED
Managed cybersecurity pricing for Australian SMBs typically depends on the number of users, devices, and the level of protection required. At All IT Services, our cybersecurity solutions are bundled into our managed IT plans so you get endpoint protection, monitoring, and training as part of a predictable monthly cost — not as expensive add-ons. Contact us for a tailored quote based on your business size and needs.
The Essential Eight is a set of baseline cybersecurity mitigation strategies developed by the Australian Cyber Security Centre (ACSC). It covers eight key areas including application patching, restricting admin privileges, multi-factor authentication, and regular backups. Achieving higher maturity levels across all eight strategies significantly reduces your exposure to common cyber threats. We align our cybersecurity services to Essential Eight as standard.
SMB1001 is a cybersecurity certification designed specifically for small and medium businesses. It provides a structured, tiered framework that helps SMBs demonstrate their commitment to cyber resilience without requiring the complexity of enterprise-grade standards like ISO 27001. All IT Services is SMB1001 certified, and we help our clients work toward their own certification as part of our managed cybersecurity program.
We recommend running phishing simulations monthly. This frequency keeps security awareness top of mind without causing fatigue. Our cyber safety training program varies the difficulty and type of simulated attacks each month — from fake invoices to credential harvesting — so your team is tested against the threats that are actually targeting Australian businesses right now.
EDR is a cybersecurity technology that continuously monitors endpoint devices (laptops, desktops, servers) for suspicious behaviour. Unlike traditional antivirus that scans for known malware signatures, EDR uses behavioural analysis to detect fileless attacks, zero-day exploits, and advanced persistent threats. We deploy Huntress-powered EDR across all client devices, backed by a 24/7 human-led threat operations centre.
Yes. While our head office is in Brookvale on Sydney's Northern Beaches, we provide managed cybersecurity services to businesses across Sydney, Melbourne, Brisbane, the Gold Coast, Orange, Bathurst, and the Central West of NSW. Our monitoring and management tools are cloud-based, so we deliver the same level of protection regardless of your location.
If you suspect a breach, contact your IT provider immediately — do not attempt to investigate on your own. All IT Services clients have access to our incident response process which includes isolating affected systems, preserving evidence, assessing the scope of the breach, and guiding you through your obligations under the Notifiable Data Breaches scheme. Having a documented disaster recovery plan in place before an incident occurs is critical.
FRAMEWORK COMPARISON
| Feature | SMB1001 | Essential Eight | ISO 27001 |
|---|---|---|---|
| Designed for | Small & medium businesses | All Australian organisations | Enterprise / any size |
| Developed by | Cyber Security Certification Australia | Australian Cyber Security Centre (ACSC) | International Organization for Standardization |
| Complexity | Low — tiered levels | Moderate — 3 maturity levels | High — full ISMS required |
| Certification available | Yes — Bronze to Diamond | No formal cert (self-assessed) | Yes — accredited audit |
| Cost to implement | Low to moderate | Low to moderate | High (audit fees + implementation) |
| Focus areas | People, process, technology basics | 8 technical mitigation strategies | Comprehensive information security management |
| Best for | SMBs wanting a starting point | Businesses aligning to ASD guidance | Enterprises needing global recognition |
| All IT Services alignment | Certified ✓ | Aligned ✓ | Can support implementation |