Frequently Asked Questions (FAQs)

DSI stands for Dynamic Standards International. We are a not-for-profit organization that develops dynamic cybersecurity standards to help small and medium-sized businesses (SMBs) improve their cybersecurity practices and protect their data.

SMB1001 is a multi-tiered cybersecurity certification standard created by DSI globally for small and medium-sized businesses. SMB1001 helps these businesses improve their cybersecurity in a manageable and affordable way.

Cybersecurity is crucial for SMBs because they are often targets of cyber-attacks. Good cybersecurity practices help protect sensitive data, ensure business continuity, and build trust with customers and partners.

There are five levels in the SMB1001 standard:

• Level 1
• Level 2
• Level 3
• Level 4
• Level 5

Each level has specific requirements that help businesses progressively improve their cybersecurity.

SMB1001 covers five key areas:

1. Technology Management
2. Access Management
3. Backup and Recovery
4. Policies and Processes
5. Education and Training

• A "Ticket to Trade" Globally: As the only globally applicable standard specifically for smaller organizations, it provides a universal language of trust that is recognized across borders, making it easier to compete for international contracts and tenders.
• Strengthened Digital Defense: Implements practical, high-impact practices that safeguard your data and systems against evolving global cyber threats and scams.
• Built-In Scalability: Its flexible, multi-tiered approach allows you to start at a level that fits your current resources and scale your security as your business grows.
• Enhanced Partner Confidence: Provides large enterprises and government bodies with verified assurance that you meet rigorous, up-to-date security benchmarks, reducing risk across the entire supply chain.
• Seamless Compliance Integration: While a robust standalone solution, SMB1001 is designed to align with broader international frameworks, serving as an optional stepping stone toward other global certifications if your business needs evolve.
• Agile Protection: Unlike static certifications, SMB1001 is updated annually to ensure your defenses remain relevant in a rapidly shifting global threat landscape

SMB1001 is designed to be more affordable and easier for SMBs to adopt compared to enterprise-level standards such as ISO/IEC 27001. While ISO/IEC 27001 is the global benchmark for large-scale information security management, SMB1001 provides a practical and structured pathway for smaller organizations to gradually improve their cybersecurity maturity.

By aligning with the foundational requirements of international frameworks like the UK’s Cyber Essentials and the U.S. CIS Controls, SMB1001 allows businesses to build a robust security posture without the complexity and resource overhead typically associated with enterprise standards.

As the standard-setting body, Dynamic Standards International (DSI) maintains the integrity and development of the SMB1001 Standard but does not issue certifications directly. This ensures a transparent, third-party validation process consistent with international best practices.

Certification is managed by authorized Dynamic Standard Certifiers (DSCs). Currently, CyberCert is the official DSC for SMB1001. They provide the global digital platform required to assess your business and issue certification upon meeting the Standard’s requirements.

Unlike traditional frameworks designed for large-scale enterprises, SMB1001 is purpose-built for the small and medium business ecosystem. While standards such as ISO/IEC 27001 or the US Cybersecurity Maturity Model Certification (CMMC) are often the benchmark for global corporations, they frequently include complexities and overhead that are not relevant or accessible for smaller organizations.

The SMB1001 Advantage:

• Bespoke Design: Every control within SMB1001 is curated specifically for the SMB context, ensuring that security measures are impactful without being over-engineered.
• Maturity Matching: Rather than a one-size-fits-all approach, SMB1001’s five levels are designed to align with where a business currently sits. Whether you are a micro-business or a growing mid-sized firm, you can achieve a level of certification that reflects your specific operational reality.
• Accessibility: By removing the "enterprise noise," SMB1001 allows businesses to focus their resources on relevant protections, making robust cybersecurity achievable rather than aspirational.

The primary difference is intent. While enterprise standards aim for universal complexity, SMB1001 delivers a tiered, SMB-centric architecture that provides high-level security through a lens of practical business logic.

For Level 1, businesses need to:

• Engage a technical support specialist
• Install and configure a firewall
• Install antivirus software on all devices
• Automatically install software updates and patches
• Change passwords routinely
• Implement a backup and recovery strategy for important digital assets