A Clear Path From Getting Protected to Getting Certified
Cyber security shouldn’t be a guessing game. We use SMB1001, the tiered cyber security standard built for small and medium businesses, as the roadmap for every client. You always know where you stand, what’s next and what it gets you.
- Foundations (SMB1001 Bronze): EDR, patching, antivirus, backup and managed support, included with Proactive Care and Total Care.
- Gold Pathway (SMB1001 Silver to Gold): MFA everywhere, password management, email protection, security training, policies and 24/7 monitoring, added in the order that matters most for your business. This is our target for every client.
- Advanced Assurance (SMB1001 Platinum and Diamond): vulnerability scanning, penetration testing, encryption, and audit preparation, for organisations with higher-risk or contract-mandated requirements.
Why Gold Tier? SMB1001 Gold (27 controls) is designed for industries like finance, healthcare and professional services. It covers what insurers, procurement teams and larger clients now ask about, and it’s annually attested by us, so there’s no external audit to pay for. Learn more about SMB1001 certification →
Stage 1
Cyber Security Foundations (SMB1001 Bronze)
Every Revolution client on an IT Plan gets Endpoint Detection and Response (EDR) and Managed Detection and Response (MDR) as standard.
This pair of tools watches the devices your team uses every day, including desktops, laptops, servers and virtual machines. They spot suspicious behaviour indicative of a breach and automatically contain threats before they spread. Traditional antivirus only catches threats it already knows about and has a definition for. Our tools catch the behaviour behind new threats.
Together with managed patching, updates, backup and a dedicated support team, this covers the technical groundwork for SMB1001 Bronze. It also gives you a head start on Gold, because these baseline cybersecurity tools are Gold-level controls that many businesses don’t have yet.
Just starting out? Begin with the basics
If your business is early in its security journey, the NZ Government’s National Cyber Security Centre (NCSC) publishes a set of Critical Controls. They’re a practical list of rules worth following first. We use them as a starter checklist to get the essentials right before moving on to SMB1001 certification.
Stage 2
The SMB1001 Gold Pathway (Silver to Gold)
This is where most of our clients sit. We build on your foundations, adding the controls and documentation SMB1001 Silver and Gold require. We can help you implement these controls one step at a time, starting with what reduces your risk the most.
Security we put in place and manage
- Multi-factor authentication on email, business apps and whatever other applications you use
- Organisation-controlled password manager, so there are no shared or reused logins
- Email authentication and anti-spoofing (SPF, DKIM, DMARC) to stop fake emails that look like yours
- Least privilege access, so staff don’t have admin rights that they don’t need to do their jobs
- Server and network patching, keeping vital infrastructure up to date and secure
- Security awareness training, so staff can spot the new kinds of phishing emails, dodgy links and invoice scams that keep evolving
- Backup testing to prove your data can actually be restored
- Asset lifecycle management: a current digital asset register and secure disposal of old devices
- 24/7/365 security monitoring: backed by our Security Operations Centre (SOC) where actual humans review alerts from both your computers and cloud-based systems like Microsoft 365.
Policies and paperwork, made simple
Gold isn’t only about technology. We give you templates and guidance for:
- Cyber security policy, incident response plan and AI use policy
- Invoice fraud procedure and staff confidentiality agreements
- Visitor register and secure document destruction
- Checking that your business or cyber insurance is in place
We’ll show you exactly which SMB1001 controls you already meet and what’s left to reach Gold, with a fixed price for getting there.
Stage 3
Advanced Assurance (SMB1001 Platinum and Diamond, Essential Eight)
Some organisations need more than Gold: critical infrastructure, government suppliers, defence-adjacent businesses, or anyone with a contract that names a specific framework.
We prepare you for SMB1001 Platinum or Diamond, which add vulnerability scanning, encryption at rest, application control, penetration testing, supply-chain assurance and an independent external audit. Where a contract requires it, we can also align you with the Essential Eight Maturity Model.
Ready to get SMB1001 Gold certified?
Book a cyber security gap assessment and we’ll show you exactly where you stand against all 27 Gold controls, what it’ll take to close the gaps, and what it’ll cost. No complicated IT jargon – and above all – no pressure.
Already a Revolution client? Email helpdesk@rvn.co.nz, submit a ticket through the Client Portal, or call us on 09 973 4770.
Managed Cybersecurity Services FAQs
Let’s make your business IT perform
Have a question or need some advice? We would love to help. Get in touch today.
General Enquiries
Service Helpdesk
