Affordable cyber certification for small and micro-businesses
A simpler, more affordable path to cyber assurance – built for businesses with 1–20 staff who need protection and proof, without the price tag of Cyber Essentials.
Cyber assurance for micro and small businesses that need a practical route forward.
SMB1001 gives smaller businesses a staged way to improve cyber security without jumping straight into heavy standards that may be too much too soon.
We help micro and small businesses in Chesterfield, Derbyshire, Sheffield and across the UK understand which level fits, what controls are needed, and how to put the right tools, policies and evidence in place.
In simple terms: choose your level → close the gaps → gather evidence → submit with confidence.
A better-fit route for smaller businesses.
Some certifications feel too light. Others feel too heavy. SMB1001 sits in the middle: practical cyber assurance for micro and small businesses that need clear controls, evidence and a realistic improvement path.
It is especially useful if you are starting to face client questions, insurance checks, tender requirements or GDPR-related concerns.
Security, confidence and proof.
- Show clients you take cyber security seriously.
- Improve practical controls across devices, email, backup and access.
- Support cyber insurance conversations.
- Create evidence that is easier to explain.
- Build towards stronger standards over time.
Small businesses often have more in place than they think.
Many small businesses assume cyber security standards are only for larger organisations.
Most are surprised how much they already have in place once we start looking properly.
Often, it is the evidence that is missing.
How Black Swan helps you get there.
Choose the right level
We help you decide whether Bronze, Silver or Gold makes sense for your business, risk and client expectations.
Put controls in place
We use practical tools and services to meet the requirements without creating needless complexity.
Gather evidence
We help with implementation, screenshots, configuration evidence and supporting information where needed.
What cyber controls are required for SMB1001?
Below is a clear breakdown of the main levels based on the 2026 DSI amendments, and how Black Swan can help deliver the requirements using our trusted toolset.
| Level | Bronze — Level 1 | Silver — Level 2 | Gold — Level 3 |
|---|---|---|---|
| Ideal for | Micro-businesses, sole traders and start-ups. | Growing small businesses. | Accountants, IFAs, recruiters and firms handling higher-risk data. |
| Core focus | Stop the most common attacks. | Access control, email security and stronger policies. | EDR, MFA everywhere, secure disposal and incident response. |
| Requirements |
|
|
|
| Package route | Cygnet Shield — SMB1001 Bronze | Swan Guard Pro — SMB1001 Silver | Swan Guard Pro + Huntress — SMB1001 Gold |
| Outcome | A realistic baseline that meets Level 1 requirements and helps stop opportunistic attacks. | A more structured environment ready for handling sensitive client data. | Modern monitored defence suitable for insurers, clients, tenders and regulatory expectations. |
Bronze — Level 1
Ideal for: micro-businesses, sole traders and start-ups.
Core focus: stop the most common attacks.
- Firewall installed and configured.
- Anti-virus on all devices.
- Automatic updates and patching.
- Password hygiene.
- Basic backup strategy.
- Cyber awareness training.
Package: Cygnet Shield — SMB1001 Bronze
Silver — Level 2
Ideal for: growing small businesses.
Core focus: access control, email security and stronger policies.
- TLS certificates on public websites.
- Servers properly patched.
- No admin rights for staff.
- Individual accounts for all employees.
- Password manager.
- MFA on email.
- Email authentication and anti-spoofing.
- Confidentiality agreements and invoice fraud policy.
Package: Swan Guard Pro — SMB1001 Silver
Gold — Level 3
Ideal for: higher-risk small businesses and professional services firms.
Core focus: EDR, MFA everywhere, secure disposal and incident response.
- Endpoint Detection and Response.
- MFA on all business apps and social media.
- Secure RDP via VPN.
- Cyber insurance.
- Cyber security policy.
- Incident response plan.
- Secure disposal and responsible AI usage policy.
Package: Swan Guard Pro + Huntress — SMB1001 Gold
How we help deliver the controls.
Heimdal NGAV
Next-generation anti-virus for the baseline endpoint protection requirements.
PatchingPatch & Asset Management
Automated updates and patching support for devices and servers.
BackupMicrosoft 365 Backup
Protect email, OneDrive and SharePoint data from loss or deletion.
RecoveryEndpoint & Server Backup
Recover files and devices if something is deleted, damaged or encrypted.
PasswordsKeeper Password Manager
Support stronger password hygiene and safer account access.
Email authenticationSendmarc
DMARC, SPF and DKIM setup to reduce spoofing and impersonation.
EDRHuntress EDR
Managed endpoint detection and response for stronger monitored defence.
IdentityHuntress ITDR
Spot suspicious Microsoft 365 activity and identity-based attacks.
SMB1001 vs Cyber Essentials vs ISO 27001.
| Feature | SMB1001 | Cyber Essentials | ISO 27001 |
|---|---|---|---|
| Designed for | Micro and small businesses. | SMEs and larger businesses. | Enterprises and compliance-driven organisations. |
| Focus | Practical, real-world controls. | Basic technical protection. | Formal ISMS governance. |
| Levels | Five tiers, Bronze to Diamond. | Basic and Plus. | Single certification level. |
| Evidence | Screenshots, configuration logs and audits. | Questionnaire, plus audit for Plus. | Policies, risk assessments and audits. |
| Typical cost | £95–£895. | £350–£3,000, with Plus often higher. | Often £5,000+ including audit and consultancy. |
| Time to certify | Usually 2–4 weeks. | Usually 1–3 weeks. | Often 3–6+ months. |
SMB1001
Designed for micro and small businesses. Practical controls, staged levels, evidence such as screenshots and configuration logs.
Cyber Essentials
A UK Government-backed technical baseline. Good for supplier assurance and common security basics.
ISO 27001
A formal information security management standard, usually heavier and more suited to larger or compliance-led organisations.
A good fit for smaller businesses that need proof.
- Micro-businesses and sole traders.
- Small businesses handling client data.
- Professional services firms.
- Businesses facing insurance or tender questions.
- Companies not ready for ISO 27001.
A good fit matters.
- If you need a UK Government-backed certification specifically, Cyber Essentials may be better.
- If your client requires ISO 27001, SMB1001 will not replace it.
- If you only want a badge without fixing gaps, this will not help much.
- If you need enterprise-level governance, ISO 27001 may be the stronger route.
Build on your SMB1001 journey.
If you are weighing up certificates, thinking about cyber insurance, or looking at the tools that help you meet the standard, these pages are a good next step.
SMB1001 vs ISO 27001
Which route makes more sense for a smaller business?
ComparisonSMB1001 vs Cyber Essentials
Compare certification routes by size, budget and client need.
InsuranceSMB1001 & Cyber Insurance
Support insurance conversations with clearer evidence.
ComplianceSMB1001 for GDPR Security
Practical security steps that support good data protection habits.
Security stackBuild With Heimdal
Endpoint protection, patching and layered controls.
Security stackBuild With Huntress
Managed detection and identity monitoring.
CertificationCyber Essentials Certification
A sensible next step when you need UK Government-backed certification.
Managed support24/7 Managed Cyber Security
For businesses that want ongoing monitoring and support beyond certification.
SMB1001 certification support in Chesterfield, Derbyshire and South Yorkshire.
Black Swan Cyber Security Solutions is based near Chesterfield and supports micro and small businesses across Chesterfield, North East Derbyshire, Sheffield and the surrounding areas.
If you are a local accountant, consultant, trades business, recruiter, charity, care provider or small professional services firm, we can help you understand which SMB1001 level fits and what evidence you need.
Chesterfield businesses
SMB1001 support for businesses in Chesterfield, Hollingwood, Brimington, Staveley, Clay Cross and surrounding areas.
North East Derbyshire
Practical cyber assurance support for micro and small businesses across Dronfield, Eckington, Wingerworth and nearby areas.
Sheffield and South Yorkshire
Support for small businesses that need a practical route to improve cyber security, insurance readiness and client assurance.
SMB1001 questions small businesses often ask.
Is SMB1001 the same as Cyber Essentials?
No. SMB1001 and Cyber Essentials are different certification routes. Cyber Essentials is UK Government-backed, while SMB1001 is designed as a staged cyber assurance route for smaller businesses.
Which SMB1001 level should we choose?
That depends on your size, risk, client requirements and budget. Bronze may suit very small businesses starting out. Silver adds stronger access and email controls. Gold is better for higher-risk firms that need monitored defence and stronger evidence.
Can Black Swan help us implement the controls?
Yes. We can help with the technical controls, tools, policies, evidence gathering and practical implementation needed to support your chosen level.
Can SMB1001 help with cyber insurance?
It can help show that your business is taking practical steps to manage cyber risk. It does not guarantee insurance approval, but it can support the conversation and evidence process.
Is SMB1001 suitable for professional services firms?
Yes. It can be a useful route for smaller accountants, IFAs, recruiters, consultants and other firms that handle sensitive client data but are not ready for ISO 27001.
Find the right SMB1001 route before you start buying tools.
We’ll help you understand which level fits, what you already have, what is missing, and what needs to be evidenced.
No jargon. No pressure. Just a practical route forward.
Meet Kevin: Founder of Black Swan
Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you!
From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.
Ready to replace sleepless nights with peace of mind? It all starts with an informal chat!
Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.