Cyber security done the way Kiwi SMBs actually need it.
Cybersecurity does not have to be complex or costly. At Business IT, we understand the pressure SMBs face: limited time, constrained budgets, and standards that can be hard to make sense of.
Together with Dynamic Standards International, we are bringing New Zealand businesses SMB1001 — a cybersecurity standard built for SMBs.
It is practical, scalable, and grounded in the real needs of growing businesses.
330+
Satisfied Clients
Good humans. Big personalities. Great tech.
Good humans. Big personalities. Great tech.
Isometric has been quietly running IT and security for New Zealand businesses and schools since 2007. We're based in Titirangi, owned and operated locally, and we've grown by doing the work properly — not by being the loudest voice in the room.
That matters because SMB1001 Gold lists an MSP partner as the very first requirement — and the technical controls account for the majority of the standard. Choosing a partner who is themselves certified isn't a nice-to-have; it's the difference between a credible certification and a paper exercise.
2350
USERS WORKING WITH
12000
ENDPOINTS MANAGING
18
YEARS OF EXPERIENCE
- Foundational hygiene — firewalls, antivirus, automatic updates, basic backups. The starting line.
- Stronger controls including MFA, email security baselines, and a written incident response approach.
- The recommended target for credible SMBs. EDR on every device, DMARC enforcement, immutable backups, AI & third-party policies, continuous staff training, and director attestation.
- This is where we aim with you.
- Independent verification. Advanced governance, mature monitoring, and integration into business risk management.
- Your governance frameworks, risk management and monitoring are already aligned with ISO 27001 — the next level is within reach.
Working Together
How we get you there. Without the drama.
We've done this for our own business and for our managed-service clients. The path is well-trodden and the tooling is in place — we'll meet you where you are today and steer the project end-to-end.
Discovery Call
A free, no-pressure conversation about your business, your current setup, and what certification needs to achieve.
~ 30 minutes
Gap Assessment
We map your environment against all 27 Gold controls and produce a clear, prioritised plan with realistic timelines.
~ 48hrs
Implementation
We deploy the technical controls, draft the policies, run the staff training, and gather the evidence the standard requires.
~ 2 Weeks
Certify & Renew
Director attestation, CyberCert submission, badge in hand — then we keep the controls live with annual renewal support.
Ongoing