Compliance

What Is SMB1001 and How Apollo Secure Helps MSPs Get Clients Certified

Damien Cantelo
July 1, 2025

Cyber threats aren't just a problem for big business. Small and medium businesses (SMBs) are increasingly being targeted but they often lack the resources to properly manage these risks. As an MSP, security standards are a good way for you to align your clients to best-practices and prove they're doing the right thing, but unfortunately most security standards are developed for larger corporations, not SMBs. That’s where CyberCert Gold (SMB1001 Tier 3) comes in.

SMB1001 is managed by DSI and sets out a clear, practical checklist to help your SMB clients build a strong cybersecurity foundation, offering peace of mind and helping demonstrate trust to customers, suppliers and insurers. There are 5 certification tiers, with Gold Tier 3 being the minimum level recommended for businesses handling sensitive data. The standard includes a range of requirements across People, Process and Technology. The first 13 of the 22 requirements under the Gold standard relate to Technology requirements which you, as their MSP, will be responsible for. The remaining 9 requirements are based on the People and Process sides of the equation, which is where Apollo Secure can help.  

The Apollo Secure all-in-one platform delivers automation to simplify the process and accelerate the path to compliance.

Why CyberCert SMB1001 Gold Matters

Achieving certification shows you’ve helped your clients take steps to:

  • Protect their business against data breaches and scams
  • Reduce risk from human error and outdated systems
  • Respond quickly to security incidents
  • Build trust with clients, partners and vendors

For many industries, it’s becoming a must-have to win business (particularly tenders), pass audits or get cyber insurance.

What Certification Requires (in Simple Terms)

They key areas of SMB1001 Gold are:

  1. Technology Management
  2. Access Management
  3. Backup & Recovery
  4. Policies, Processes & Plans
  5. Education & Training

In addition to the Technology requirements delivered by you as their MSP (in sections 1-3 above), Apollo Secure delivers the requirements in sections 4 and 5 above ina simple SaaS platform, including:

  • A documented cybersecurity policy
  • A policy to prevent invoice fraud
  • A defined process for handling security incidents
  • Secure practices for removing or disposing of old equipment
  • A way to track all your digital assets and systems
  • Staff training to prevent phishing and human error

What Apollo Secure Delivers

We’ve built a tailored package for our easy-to-use cyber platform to help meet the specific requirements of SMB1001 Gold - without needing an in-house security team or expensive consultants. Here's what the platform provides:

✅ A Cybersecurity Policy That Works for You

We help you create a practical, easy-to-follow policy that sets out how your clients protect sensitive data, manage access and handle everyday security decisions.

✅ An Incident Response Plan

We prepare your clients with a step-by-step plan for responding to cyber incidents - so if something goes wrong, their team and your team know exactly what to do.

✅ A Policy to Prevent Invoice Fraud

We help you put controls in place to catch red flags and protect your business from scammers trying to impersonate suppliers or divert payments.

✅ Secure Disposal Procedures

We provide guidance on how to safely wipe or destroy devices (like laptops, phones, or USBs) before they leave the business - protecting your data even at end-of-life.

✅ A Digital Asset Register

We provide an online tool to help you track what devices, systems, and apps your clients uses - so nothing slips through the cracks.

✅ Cybersecurity Awareness Training for All Staff

Your team gets access to short, engaging online training videos that teach them how to spot phishing emails, use strong passwords and avoid common traps.

Ready to Get Certified?

CyberCert SMB1001 Gold is one of the best ways for you and your clients to demonstrate that cybersecurity is taken seriously. With Apollo Secure, you get the tools, policies and training to make certification achievable - without the complexity and expense.

Let’s secure your client's business and build trust... together.

👉 Contact us to get started or learn more about our SMB1001 plan.

Related Blogs