SMB1001 Gold, Tier 3

SMB1001 Gold Certification: Enterprise-Grade Security for Growing Organizations.

Self-attested by a company director. Gold needs no external assessor.

SMB1001:2026 · Level 3 · 27 requirements

Organizations managing sensitive data, taking part in regulated supply chains or facing higher client expectations, such as finance, healthcare, technology and government suppliers.

Overview

What Gold Is For.

Gold builds on Bronze and Silver with mature governance, detection and response, and strategic oversight: a comprehensive set of defenses comparable to what large enterprises use, sized for a small or mid-sized business and delivered as a managed service.

In the 2026 edition, Gold adds endpoint detection and response, an AI usage policy and holding business or cyber insurance, alongside the cybersecurity policy and incident response plan.

What Gold Adds

10 REQUIREMENTS

Implement Endpoint Detection and Response (EDR)MFA on all business applications and social media accountsEnsure Remote Desktop Protocol (RDP) occurs only over Virtual Private Network (VPN) connectionsPurchase and maintain business or cyber insuranceImplement a cybersecurity policyImplement a response plan for cyber related incidentsUtilize secure methods of physical document destructionEnsure all computer devices that store sensitive, private, and/or confidential information are disposed of securelyImplement and maintain a digital asset registerImplement a policy for the responsible and secure use of AI technology

Plus every requirement of Bronze, Silver, for 27 in total. Requirement titles are CyberCert's own, from its published SMB1001:2026 matrix.