Recognition and credentials
Credentials you can check.
From a certificate on the CyberCert register to records we send with a tender response, each with its record and its dates.
Issuer records
The badges we hold.
The CyberCert certificate, the Xero listing and both Awwwards nominations verify online. The panel records come with a tender response, or on request.
CyberCert
SMB1001:2026 Gold
16 Jun 2026 to 17 Jun 2027
Local Buy
Queensland councils, LB308
Appointed 23 Oct 2026
Evidence on request- NSW ICT Services SchemeSCM0020
NSW Government
ICT Services Scheme SCM0020
Registered 14 Oct 2026
Evidence on request - Victorian Fair Jobs CodeFJC-261023-11119
Victorian Government
Fair Jobs Code certificate
23 Oct 2026 to 22 Oct 2028
Evidence on request - Essential EightMaturity Level 3
Own estate
Essential Eight Maturity Level 3
Assessed September 2026
Evidence on request 
Every record
Each record with its issuer and its dates.
Certification
SMB1001:2026 Gold
CyberCert · 16 Jun 2026 to 17 Jun 2027
Own estate
Essential Eight
Maturity Level 3, assessed September 2026.
Evidence on requestStandards
Frameworks we work against
ASD ISM, Privacy Act 1988 and APPs, CIS Controls v8.
Standards
Management system
Management system documented to ISO/IEC 27001:2022 and ISO 9001:2015.
Queensland councils
Local Buy LB308
Pre-qualified supplier to Queensland councils under Local Buy arrangement LB308, ICT Solutions, Products, Services and New Technologies.
Appointed 23 Oct 2026
Evidence on requestNSW Government agencies
NSW ICT Services Scheme
Prequalified supplier under the NSW Government ICT Services Scheme (SCM0020).
Registered 14 Oct 2026
Evidence on requestVictorian Government buyers
Victorian Fair Jobs Code
Holder of Victorian Fair Jobs Code pre-assessment certificate FJC-261023-11119, required for Victorian Government threshold and high-value procurement.
23 Oct 2026 to 22 Oct 2028
Evidence on requestPersonal credential
ISO/IEC 27001:2022 Lead Auditor
Kane Roberts, Director and Chief Information Security Officer, holds the Exemplar Global Lead Auditor credential for ISO/IEC 27001:2022 (certificate C-560291).
Evidence on requestPersonal credential
Accredited Specialist (Business Law)
Contracts, governance and privacy are led by a director who is a Queensland Law Society Accredited Specialist (Business Law).
Evidence on requestPartner
Xero Developer Partner
Integrations on the Xero Accounting API, from quote-to-cash to bank-feed and transaction sync.
Platform
Microsoft Azure and Microsoft 365
Microsoft 365 tenants we operate for clients, our own among them.
Cover
Insurance
Black Shard maintains professional indemnity, public liability, cyber and workers' compensation insurance. Certificates of currency are available on request.
Recognition
Awwwards Nominee
Nominated twice on Awwwards: blackshard.com.au in September 2026 and foxvaluations.com.au, the Fox Valuations site we built, in October 2026.
September and October 2026
Reports and whitepapers
Recognition by evidence: our own figures, charted.
Report
What our first 430 million security events look like
Our security monitoring analysed its first 430 million security events from 1 October to 26 October 2026, counted at 00:45 AEST. 49.8 per cent of events arrived outside 07:00 to 19:00 AEST, and 50.2 per cent inside it.
Measured 26 Oct 2026, 00:45 AEST · PDF, 6 pages, 305 KB
Report
Notifiable data breaches, read for small and mid-sized firms
The OAIC received 1,205 data breach notifications in the 2025 calendar year, up 8 per cent on 1,112 in 2024 and the most in any year of the scheme. Malicious or criminal activity caused 716 of the 1,205 notifications, 59 per cent.
OAIC figures of 6 Jul 2026, read 26 Oct 2026 · PDF, 7 pages, 230 KB
Report
Essential Eight Maturity Level 3 in practice
Essential Eight Maturity Level 3 across all eight strategies. Assessed on 24 September 2026, with each rating read back from the system that enforces it.
Assessed 24 Sep 2026 · PDF, 7 pages, 247 KB
Whitepaper
Jetstone technical whitepaper
Jetstone is a cyber defence agent for organisations with 1 to 200 devices. It will watch Windows and Mac devices and Microsoft 365 or Google Workspace sign-ins, and it is built in Australia and will be hosted there. Every automatic action will be undoable in one tap.
Current at 26 Oct 2026 · PDF, 7 pages, 304 KB
Report
Security questionnaires and tenders
Our security questionnaire translator sorts each question into one of 56 control families. It flags 8 of the 56 as asking for an artefact that most small and mid-sized suppliers do not hold.
Tools read 26 Oct 2026 · PDF, 8 pages, 279 KB
Need a record for a tender or a questionnaire?
We send certificates, confirmations and certificates of currency with our response.