SMB1001 Diamond, Tier 5
SMB1001 Diamond Certification: Ultimate Cyber Resilience.
Attested by a company director and externally audited.
The most security-mature organizations: those that cannot afford a breach, lead their supply chains or need the strongest trust signal.
Overview
What Diamond Is For.
Diamond builds on every prior tier and adds the top-level controls: encryption at rest, application control, macro hardening, penetration and social engineering testing, a digital trust program with suppliers, police vetting and incident response exercises.
What Diamond Adds
7 REQUIREMENTSPlus every requirement of Bronze, Silver, Gold, Platinum, for 39 in total. Requirement titles are CyberCert's own, from its published SMB1001:2026 matrix.
How We Put It in Place
6 PARTSData Encryption
Sensitive data encrypted at rest, from laptops to cloud storage.
Application Allow-Listing
Only trusted applications run, which blocks unknown malware.
Macro and Script Hardening
Untrusted Office macros and script-based attack paths disabled or tightly controlled.
Attack and Human Risk Testing
Simulated attacks and phishing, vishing and tailgating tests, with remediation plans.
Supplier Digital Trust Program
Critical vendors assessed, contracted and held to minimum cybersecurity agreements.
Incident Response Exercises
Your response plan rehearsed so people know their part.
Considering a Different Tier?
Talk Through Diamond in 30 Minutes.
Pick a time. We will help you choose the right tier for your risk, growth and budget.
Looking for CMMC? Our Compliance Division, Capital Cyber Compliance, delivers it.