SMB1001 Bronze to Gold Guide
Cybersecurity standards are mostly written for organisations with a security team. SMB1001 is not. It gives a small business five defined levels and a route through them.
View and download
Resources
Good governance is not a document. It is a habit that documents make easier.
These are the templates, policies and checklists we use inside Layer3 and with the organisations we support. They are free, they are current, and they are yours to adapt.
The library
Some resources ask for your name and email before the download starts. That is so we can tell you when the document changes, not so we can call you.
Cybersecurity standards are mostly written for organisations with a security team. SMB1001 is not. It gives a small business five defined levels and a route through them.
View and download
Most organisations do not need to ban AI. They need a written position on it. This is ours, with the company name left blank so you can make it yours.
View and download
Next step
Filling one in tells you where you stand today. Keeping it current, and deciding what to do about what it tells you, is the work our vCIO service exists to do.
Layer3 is a managed IT provider operating an ISO/IEC 27001-certified ISMS, with offices across New Zealand.
Contact
0508 LAYER3 Book a discovery call Service status Notices
Level 2, CBD Towers
84-90 Main Street
Upper Hutt, Wellington 5018
© 2026 Copyright Layer3.
Layer3
Book a discovery call - 30 minutes, no obligation