SMB1001 Certification – Fully Managed, From $525/month
Get SMB1001 cybersecurity certification for your business. OxygenIT delivers fully managed certification from Bronze to Diamond, with indicative pricing from $525/month plus a one-off project fee, confirmed at your free gap assessment. ISO 27001 certified MSP serving NZ SMBs with 20 to 200 staff. Answer four quick questions and get a custom quote, no obligation
SMB1001 Cybersecurity Certification
Protect your business, win client trust, and meet compliance requirements with New Zealand’s leading cybersecurity standard for SMBs.
ISO 27001 Certified MSP
<11s
ISO 42001 Certified
98%
5 Tiers Available
20+
Why SMB1001 Certification?
A recognised framework that proves your cybersecurity posture to clients, insurers, and supply chain partners.
Certified Protection
Independently validated cybersecurity controls from Bronze to Diamond
Compliance Ready
Meet insurance, tender, and regulatory requirements with a recognised framework
Fully Managed
We handle the technical implementation, policies, and certification process
Scalable Tiers
Start at Bronze and upgrade as your organisation grows and matures
How It Works
We handle everything. You get the certificate.
1
Gap Assessment
2
Implementation
3
Certification
Indicative Monthly Pricing
36-month agreements shown below. All prices in AUD / NZD, per month.
The first 90 days are money back, no reason required. And there is a fee-free break at nine months on 90 days notice, so the longest you can be committed to us against your will is 12 months, not 36.
Find your price by team size
Reads the published price list below. Not every level is offered at every size, see the note underneath.
In short: SMB1001 certification for a 25 person New Zealand business costs $995 a month at Bronze, $1,740 at Silver and $2,415 at Gold on a 36 month agreement, plus a one-off project fee. The smallest engagement is $525 a month at Bronze for 10 users. All prices exclude GST.
Not every level is offered at every size. Bronze up to 25 users, Silver up to 49 users, Gold up to 150 users, Platinum up to 200 users, Diamond up to 200 users. At 151 to 200 users Platinum is the minimum tier we engage at, because at that scale independent assurance is what makes the certification hold weight with insurers, tender panels and supply chain partners. A 10 user minimum applies to every tier.
Prices are indicative and subject to a gap assessment. A one-off project fee also applies (shown in your calculator estimate). Shorter terms available at adjusted rates.
Custom Quote
Tell us about your business and we will configure the right tier, scope, and pricing for you.
Takes under a minute. No obligation, and no sales call unless you ask for one.
- Custom pricing
- Full controls list
- No obligation
SMB1001 Certification Quote Calculator
Get an instant estimate for your cybersecurity certification journey with OxygenIT
Select your target certification tier
Organisation size and contract term
Contract term
Your SMB1001 Estimate
Book Your Free Gap Assessment
This is an indicative estimate. Book a free, no-obligation gap assessment and we will confirm your exact tier, scope, and price.
Call 0800 242 206All prices are in NZD. This estimate is indicative only and subject to a gap assessment. Actual pricing may vary based on your current IT environment and specific requirements. Estimate valid for 30 days.
Frequently Asked Questions
How long does SMB1001 certification take?
Most clients complete Bronze to Gold in 2 to 6 weeks after the gap assessment. Platinum and Diamond add time for the independent external audit.
Is there a one-off setup cost as well as the monthly fee?
Yes. A one-off project fee applies on top of the monthly cost, and we confirm the exact figure after your free gap assessment, so there are no surprises.
What happens if we are not ready to pass?
The managed process is built so you meet each control before assessment. We remediate any gaps first, so certification is not a pass or fail surprise.
What is the difference between the self-attested and audited tiers?
Bronze, Silver and Gold are self-attested against the framework. Platinum and Diamond add an independent external audit (IVO) for a higher level of assurance.
Do we actually need SMB1001?
If clients, insurers or tenders are asking you to prove your cyber security, yes. It is the recognised New Zealand standard for SMBs. If you are unsure, the free gap assessment tells you which tier fits.