Novata Solutions Achieves SMB1001 Gold Level Certification for Cybersecurity Maturity

Novata Solutions, a leading Western Australian Microsoft Partner specialising in digital transformation for government, aged care, and enterprise sectors, is proud to announce its achievement of SMB1001 – Level 3 (Gold) certification from Dynamic Standards International (DSI). The certification, issued and validated by CyberCert Pty Ltd, marks a significant milestone in the organisation’s ongoing commitment to cybersecurity excellence, compliance, and operational maturity.

https://certification.cybercert.ai/issued/c2ab33e6-5375-4a83-a5f8-30bfb15b36c3

Elevating Trust Through Proven Cybersecurity Standards

Awarded under the SMB1001:2025 standard release, the Gold Level 3 certification validates that Novata Solutions has implemented a comprehensive suite of cybersecurity controls spanning network protection, endpoint hardening, identity security, and organisational policy frameworks. Certification was granted based on an attested compliance submission dated 12 July 2025 and is valid until 12 July 2026.

The certification affirms Novata’s readiness to protect sensitive client data, mitigate evolving digital threats, and sustain compliance across critical sectors such as aged care and public sector procurement.

Key Requirements Implemented

The SMB1001 Gold certification mandates rigorous controls. Novata Solutions has successfully demonstrated implementation of the following core areas:

Infrastructure Hardening

• Firewall configuration
• Anti-virus deployment on all endpoints
• Automated patching of devices and servers
• TLS certificates on public-facing systems

Identity and Access Management

• Role-based user accounts without elevated privileges
• Multi-Factor Authentication (MFA) for all email, business apps, and social media
• Password rotation policies and password manager adoption

Governance and Risk Mitigation

• Documented cybersecurity policies and response plans
• Invoice fraud prevention procedures
• Confidentiality agreements and visitor logs
• Secure data disposal and digital asset registers

Resilience and Education

• Full backup and recovery strategy for digital assets
• Ongoing cybersecurity awareness training for all employees

This certification also confirms that all implemented practices align with recognised national and international information security expectations, serving as a testament to Novata’s proactive security posture.

Strategic Value for Clients and Stakeholders

For clients in WA Government, aged care, and other regulated industries, this certification reinforces Novata Solutions’ role as a trustworthy digital transformation partner. The certification provides:

• Confidence in secure Microsoft 365, Azure, and Power Platform solution delivery.
• Assurance for tender eligibility where cyber maturity is a precondition (e.g., under IRAP or Essential Eight-aligned frameworks).
• Compliance alignment with ISO/IEC 27001, NIST CSF, and ACSC guidance.

Looking Ahead

As cyber threats evolve, Novata Solutions will continue to invest in advanced security controls, governance tooling, and employee capability. The organisation’s roadmap includes ISO 27001 recertification, client data classification policies, and continual alignment with Microsoft’s Zero Trust architecture.

“Cybersecurity is not a box-ticking exercise—it is foundational to our service promise. This certification demonstrates our continued commitment to protecting clients and building digital solutions with security and trust at their core,” said Rinaldo De Paolis, Chief Technology Officer at Novata Solutions.

About Novata Solutions

Novata Solutions is a Perth-based digital consultancy and Microsoft Gold Partner. With a proven track record in delivering scalable, secure, and accessible digital solutions, Novata serves local and national government, aged care providers, and private enterprise. The company’s capabilities span cloud architecture, Power Platform, Dynamics 365, SharePoint Online, and managed services—underpinned by ISO-aligned processes and public sector expertise.