Implementation plan
Turn readiness findings into staged actions with owners and dates.
SMB1001 Implementation
SMB1001 certification shows customers and partners that your business meets a chosen level of SMB1001, the tiered cybersecurity standard published by Dynamic Standards International (DSI). Umbrella Tech handles the SMB1001 implementation that comes before it: closing the gaps at your target level, writing the policies and procedures that match how you work, and assembling the evidence a certifier will review.
The problem
The challenge we help you address
A list of SMB1001 gaps needs someone to make the changes, write the documents and keep the records, while the business keeps running. Small teams rarely have the time, and an outsourced IT provider may not be set up to produce certification evidence.
The outcome
What the engagement should deliver
Controls that meet your target level, policies that reflect real practice, and an organised evidence pack ready for certification. You also receive a handover that shows who maintains each control so the business stays at that level.
How we can help
Technical controls
Configure multi-factor authentication, device management, patching and backups to the level's requirements.
Policies and procedures
Write or adapt the documents the level requires so they match how the business operates.
Staff awareness
Set up and record the training the level asks for.
Evidence pack
Organise the records and screenshots a certifier will want to see.
How we deliver
How the work runs
01
Confirm the gaps
Start from a recent SMB1001 Readiness Assessment or a short review, and agree the target level.
02
Make the changes
Deliver technical and documentation changes in a sequence that avoids disrupting staff.
03
Check and record
Test each control and capture the evidence as you go, rather than at the end.
04
Prepare for certification
Review the evidence pack against the level and hand over ongoing responsibilities.
SMB1001
SMB1001 is a tiered cybersecurity standard for small and medium businesses, published by Dynamic Standards International (DSI). Certification is issued through DSI's certification arrangements, separate from Umbrella Tech.
About SMB1001 services →A programme sized to your organisation
We confirm the current edition and target level before mapping requirements, so the work matches what your customers actually ask for rather than an assumed universal checklist.
Frequently asked questions
Can't see your question? Ask us directly →
What is SMB1001 certification?
It is independent confirmation that a business meets the requirements of a chosen SMB1001 level. We prepare you for it as an SMB1001 certification consultant; the certification decision belongs to the certifier.
When should a business use it?
When a customer, supply chain or insurer asks for evidence of cyber security and a recognised standard sized for small and medium businesses is the right answer. It is also a practical step before a larger framework such as ISO/IEC 27001.
What does implementation include?
Planning, technical configuration, policy and procedure writing, staff awareness, evidence collection and handover for your target level. The exact list depends on the level and on what you already have.
How long does a project take?
It depends on the level, the size of the gap and how quickly the business can approve and absorb changes. We confirm scope and timing in discovery.
What are the main security or governance considerations?
Controls must operate in practice, not only on paper, and someone must own them after certification. We also make sure your existing IT provider knows which settings support certification so they are not changed by accident.
Plan the next improvement
Share your readiness findings or tell us the level you are aiming for. We will plan the work needed to prepare for certification.