Funding to build cyber resilience and capability of small businesses
Provides a single service provider up to $8.1 million to set up a free, tailored, person‑to‑person Small Business Cyber Resilience Service that helps small businesses improve cyber resilience and supports recovery after cyber incidents.
Funding is for a program delivered over three financial years (2024‑25 to 2026‑27) with a project period up to 33 months and must be completed by 2027‑03‑31.
To be eligible you must have an Australian Business Number (ABN), be registered for GST, and be one of the following entities:
- an entity incorporated in Australia
- an Aboriginal and Torres Strait Islander Corporation registered under the Corporations Act 2001
- a company limited by guarantee
- an incorporated trustee on behalf of a trust where trading activities form a sufficiently significant portion of the corporation's overall activities
- an incorporated association
- an incorporated not‑for‑profit organisation
- a registered charity
- or a publicly funded research organisation
Joint applications are accepted provided a lead organisation is appointed (only the lead organisation may submit the application and enter into the grant agreement).
The project must be aimed at improving cyber resilience and capability of small businesses and supporting impacted small businesses following a cyber incident, must meet the service requirements (section 5.1.1) and include eligible grant activities (section 5.1), and expenditure must meet the requirements in section 5.3.
Projects must not commence until a grant agreement with the Commonwealth is executed.
Project period may be up to 33 months and must be completed by 2027-03-31.
Get a personalised eligibility check — your match score, which criteria you meet, and what to watch out for.
Free to search · No credit card required
Last updated: 12 February 2026