SMB1001 Silver · Level 2
Silver builds on Bronze with ten more controls focused on who can access what, multi-factor sign-in on email, and stopping invoice and email fraud.
Is Silver right for you?
What Silver is for, what it asks of you and what you’ll need to show.
Businesses with the basics in place that need stronger account security, or whose clients and partners expect more than Bronze.
Individual accounts for every person, limited admin rights, multi-factor sign-in on email, a password manager, email domain protection and payment fraud procedures.
Reports showing multi-factor sign-in and email protection settings, account and admin listings, and signed policies and agreements.
Requirements
Everything in SMB1001 Bronze, plus the controls below.
A valid security certificate on every public website, so information sent to and from it is encrypted.
A documented patching schedule for servers wherever they are hosted, with critical patches applied quickly.
Staff who don’t need to install software or change settings work from standard accounts.
Every person has their own login, with no shared accounts or passwords.
A business-grade password manager, protected by multi-factor sign-in, for staff with administrative access.
Every email account, including admin accounts, protected by a second sign-in step.
Your email domains published with SPF records, making it harder for attackers to send email that appears to come from you.
Staff, contractors and third parties bound by confidentiality before they access your data or systems.
A documented process that verifies any change to bank details and requires sign-off for larger payments.
A record of visitors and contractors entering staff-only areas.
How we get you there
Run by the same team that manages your IT, with nothing handed back to you to figure out.
01
We check your controls against Silver and every tier below it, and show exactly what’s missing.
02
As your IT provider, we close the gaps, from device settings to policies and plans.
03
We prepare the evidence in the form CyberCert expects, ready for director sign-off.
04
We submit for certification and plan the renewal so your certificate stays current each year.
Business Protect Essentials includes an SMB1001 Silver certification program, completed within 60 days of formal kickoff.
FAQs
Anything else? Book an assessment and we’ll talk it through.
No. You can certify directly at Silver, provided the Bronze controls are also in place. We check both in the gap assessment.
No. Silver is director-attested, backed by evidence we prepare and submit to CyberCert.
Rarely the technology. Moving everyone to individual accounts, removing everyday admin rights and agreeing the invoice fraud process take the most coordination.
Compare the tiers
Requirement counts are cumulative: each tier includes everything below it.
Talk to us
Book an assessment and we’ll show you how close you are to SMB1001 Silver, what to fix first and how long it will take.
