ProtectSMB GRC, offered through Stormcrest.
A cyber security governance, risk and compliance platform for Australian businesses, made by ProtectSMB. Stormcrest resells it: we can walk you through it and introduce you to the ProtectSMB team.
Disclosure. ProtectSMB is a separate company. Stormcrest offers it as a reseller and may earn a commission. ProtectSMB and its features are provided by ProtectSMB. Prices are theirs and may change, so check current pricing on their site.
01 · What it does
Know where you stand, and show the evidence.
ProtectSMB GRC gives an organisation one place to map its controls against common Australian and international frameworks, track risks and gaps, and report on progress.
One control matrix
Brings the ISM, the Essential Eight, ASD Essentials, NIST CSF, ISO 27001 and SOC 2 together in a single matrix of controls.
Risk register and remediation tasks
Record risks and track the work needed to close the gaps.
Evidence vault
Keep the documents that support each control in one place.
ISO 27001 internal audit checklist
A structured checklist for running an internal audit against ISO 27001.
Readiness score and board-ready reports
A view of where you stand, in a form you can take to your board or leadership team.
Word documentation packs
Documentation packs in Word format to adapt for your organisation.
Up to six environments
Cover up to six environments.
Australian hosting options
Including a sovereign instance hosted in Microsoft Azure Australia East.
02 · Pricing
ProtectSMB's published prices.
Per workspace, per year, in Australian dollars, excluding GST.
| Plan | Price a year | Covers |
|---|---|---|
| Essentials | AUD $500 | Essential Eight |
| Professional | AUD $1,000 | One framework |
| Enterprise | AUD $30,000 | All five frameworks, with ASD Essentials included |
- ASD Essentials add-on for Essentials and Professional: AUD $1,000 a year.
- Professional services from AUD $200 for setup.
Prices as published by ProtectSMB on 1 November 2026. ProtectSMB sets them and may change them, so check current pricing on their site (opens in a new tab).
03 · Where Stormcrest fits
A recruiter that also resells one product.
Stormcrest is a recruitment firm. ProtectSMB GRC is ProtectSMB's product, not ours. We offer it because it fits the work our cyber security clients do.
- We can walk you through the platform and the plans, and answer questions about how it might suit you.
- When you're ready, we introduce you to ProtectSMB. They provide the platform, hosting, setup and support.
- If your GRC work needs people, our cyber security practice recruits GRC analysts, security risk advisers and the teams around them.
Recruitment and ProtectSMB are separate. You don't need one to use the other, and our recruitment fees are the same either way. Using a GRC platform doesn't, on its own, make an organisation compliant with any framework.
Walkthrough
See it before you decide.
Tell us a little about your organisation and the frameworks you work to. We'll usually reply within one business day to arrange a time.
Book a walkthrough with StormcrestProtectSMB
Read more on their site.
Product details, current pricing and ProtectSMB's own terms are on protectsmb.com.au.
Visit ProtectSMB (opens in a new tab)