SMB1001:2027
Commercial Use Licence
A standalone licence for organizations that build products, platforms, and services on the SMB1001 standard. From US$500, bought once per edition.
Free for every SMB on the planet from 1 Jan 2027.
Licence Benefits
The standalone Commercial Use Licence includes everything your organization needs to build, deliver, and stay current on SMB1001.
The rights
Your Commercial Use Licence grants full, ongoing rights to the 2027 release of SMB1001 while your licence remains active. Under this licence, your staff may print, copy, and host the standard documents, as well as embed SMB1001 tier structures and logic directly into customer-facing platforms to power internal and client implementation journeys.
The three-client threshold, and 1 January 2027.
Under the SMB1001 Free Licence, any Technical Support Specialist organization may deliver SMB1001-based services to up to three client organizations at no licence cost.
From 1 January 2027, any organization managing SMB1001 services for four or more clients must hold a current Commercial Use Licence, purchased standalone or included within Authorized Partner membership or Mission Membership.
The requirement is verified through DSC platforms; standalone holders verify with their CUL ID.
Commercial Use Licence (CUL) Pricing
Five tiers based on organization size. One payment, one edition.
Every licence funds the path to free access.
Licence fees cover the annual update cycle and the infrastructure behind the standard. This edition becomes free for every SMB on the planet from 1 January 2027.
Every licence funds the path to free access.
Licence fees cover the annual update cycle and the infrastructure behind the standard. This edition becomes free for every SMB on the planet from 1 January 2027.
All prices in USD and exclusive of applicable local taxes. Tier is set by the organization size you declare at purchase.
The licence is governed by the standalone Commercial Use Licence Agreement.
Every professional body has a founding chapter. This is ours.
The names recorded at the very beginning are the ones that make the mission a reality. Securing this permanent, time-limited status grants you exclusive benefits and a lasting place on the Honour Wall. Best of all, this elite status is secured by a blockchain-verified NFT credential, providing a permanent digital certificate that definitively proves your standing as a recognized founding supporter of the mission.
Join on or before 31 December 2026 and hold Founding Mission Supporter status, permanently.
Abstract
SMB1001 is a multi-tiered cybersecurity certification standard. This standard comprises of five tiers that support an organization in their journey of developing their cyber security hygiene.
SMB1001 provides organizations of any sector with guidance for developing their cybersecurity hygiene. This standard has a particular awareness of small and medium-sized businesses with their needs and resources being considered in the development of SMB1001.
Meeting the tiers of SMB1001 indicates that an organization has implemented good cybersecurity measures.
Adopting SMB1001 enables organizations to proactively manage the likelihood and impact of cyber threats, establishing a resilient security baseline. This robust foundation can then serve as a direct, streamlined path toward meeting the comprehensive requirements of ISO/IEC 27001.
SMB1001 Support
Regular Updates for Continued Relevance
As a dynamic standard, SMB1001 is updated annually by industry experts, ensuring it remains aligned with the ever-changing cyber threat landscape. Unlike many other standards that don’t update as frequently, SMB1001 regularly updates to help SMBs stay current with best practices and maintain a mature cybersecurity posture over time.
Problems Solved for SMB Owners
In the global marketplace, cybersecurity is no longer just a technical requirement, it is a strategic border crossing. SMB1001 is the only globally applicable standard specifically designed to give smaller organizations the credentials they need to compete on a world stage.
By transforming security from a barrier into a “ticket to trade,” the SMB1001 five-tier system empowers businesses to:
- Unlock New Markets Immediately: Start at the tier that matches your current capabilities to meet immediate contract requirements without over-investing.
- Scale Your Competitive Edge: Grow your certification at a pace that fits your resources, ensuring you stay eligible for increasingly complex tenders and global partnerships.
- Build Cumulative Trust: Advance from foundational preventive controls at Level 1 to elite risk governance at Levels 4 and 5, with each tier reinforcing your reputation as a secure, reliable partner.
Closing the Capability Gap
Procurement processes and international contracts increasingly demand proof of cyber maturity. While traditional enterprise-grade certifications can be an impractical barrier for smaller firms, SMB1001 levels the playing field. It provides a tailored, multi-tiered framework that proves your business is ready for global commerce.
Whether SMB1001 is your final destination for robust security or a modular foundation for other optional global standards, it ensures your business is never locked out of an opportunity due to a lack of certification.
How it Supports Service Providers
For the IT Providers all over the world, Managed Service Providers (MSPs), and Managed Security Service Providers (MSSPs) that support the millions of SMBs, SMB1001 offers a consistent framework for taking their clients on a pathway to affordable cybersecurity certification.
The tiered approach allows providers to offer scalable services, adapting their cybersecurity solutions to meet the current and future needs of their clients. As a certifiable standard, it also simplifies compliance, reducing the complexity involved in guiding SMBs through their cybersecurity certification journeys.
Strengthening the Global Supply Chain
Governments and major corporations now view cybersecurity as a non-negotiable “ticket to trade,” requiring rigorous assurance that every link in their supplier network is secure.
SMB1001 bridges the gap between enterprise expectations and small business capabilities by providing:
Verified Resilience: It offers a fit-for-purpose, dynamic standard that significantly reduces systemic risk across global supply chains.
A Universal Language of Trust: As the only globally applicable standard of its kind, it gives large entities the confidence that their international partners meet recognized benchmarks.
Future-Proof Security: Because it is annually updated, SMB1001 ensures suppliers stay ahead of evolving threats rather than relying on outdated certifications.
Scalable Compliance: It provides a structured, multi-tiered framework that allows smaller partners to demonstrate maturity without the prohibitive costs of large-scale enterprise systems.
By adopting SMB1001, organizations don’t just meet a requirement, they secure their position as a trusted, long-term partner in the global economy.