Playbook for MSPs

A guide to delivering certifiable cybersecurity solutions for Managed Service Providers (MSPs).

In today's hyper connected world, cybersecurity isn't just a technical necessity - it's the cornerstone of success for businesses of all sizes.

As cyber threats escalate in sophistication and frequency, business owners are becoming increasingly aware of the vulnerabilities and risks their businesses are exposed to from cyber-attacks. Naturally they turn to you - their trusted MSPs - for guidance, protection, and peace of mind.

However, existing cybersecurity frameworks like the Australian Cyber Security Centre's Essential Eight or the U.S. National Institute of Standards and Technology (NIST) provide a framework but aren't specifically tailored to the unique needs of SMBs. They’ve been designed for enterprise and government.
This gap presents a golden opportunity for MSPs to offer a robust, certifiable cybersecurity solution that not only fortifies your clients but also elevates your position as a trusted advisor in a competitive market.
Through your guidance, your clients can obtain achievable certification in the SMB1001 standard, and convey their cCybersecurity competency to their customers, trading partners, and regulators.
Updated annually by industry experts, SMB1001 stays aligned with the changing threat landscape. This ensures your clients are always equipped with the latest best practices, maintaining a mature cybersecurity posture over time.


NIST, CIS & Essential 8 are frameworks, not a standard.
A framework provides a structured approach with flexible guidelines to manage and mitigate risks effectively, while a standard sets specific, agreed-upon requirements that ensure consistency and reliability in operations and security practices. A standard like SMB1001 opens a valuable market opportunity for MSPs to offer cybersecurity solutions that help their clients get cyber certified.
Governments and large corporations increasingly demand that their suppliers meet rigorous cybersecurity standards to protect supply chains and sensitive data. Certification with SMB1001 gives them confidence that SMB suppliers are adopting a recognised, dynamic standard aligned with global best practices. This reduces risk and streamlines procurement processes, making SMBs more competitive in bidding for contracts!

For MSPs and IT Providers
1. Reach Out: Contact us to learn more about integrating CAP into your service offerings.
2. Training: Receive training resources on SMB1001 and how to effectively guide your clients through the certification process by accessing our comprehensive library of guidance playbooks (Coming soon!)
3. Implement the Program: Start conducting GAP assessments, offering tailored services, and managing client certifications through the CAP platform.
For SMB Clients
Let your MSP know you're interested in enhancing your cybersecurity posture, express your interest!
1. Begin the Journey: Work with your MSP to assess your current maturity level and implement necessary controls.
2. Achieve Certification: Attain the SMB1001 certification level that aligns with your business needs, showcasing your commitment to security.