SMB1001 Gold Certification

Build trust with customers and your supply chain. ITFR guides your business toward SMB1001 Gold, handling the controls, policies and evidence so your team can stay focused on running the business.

SMB-focused framework
Readiness assessment
Control implementation
Certification preparation

SMB1001 Gold certification support

Show customers you take cyber security seriously

Turn customer questionnaires, tender requests and governance expectations into a practical program. ITFR coordinates the Gold controls, policies and evidence around what you already have, so your team can stay focused on the business.

Benefits at a glance

Supply-chain confidence

Show recognised progress toward stronger cyber maturity.

Stronger assurance

Use clear evidence for relevant tenders and customer questions.

Practical governance

Put responsibilities, policies and reviews into a workable rhythm.

Cost-conscious progress

Start with existing controls and agree scope before implementation.

Your Gold journey

A clear path from your current position to Gold

One guided service covers assessment, agreed scope, implementation and certification preparation, while your team stays focused on the business.

01

Secure IT

Assess

Review your existing controls and evidence to set clear priorities.

02

Secure IT

Remediate

Close agreed gaps across technology, policies and responsibilities.

03

Govern IT

Evidence

Organise policies, records and reports so the work is ready for review.

04

Govern IT

Certify

An authorised director attests and CyberCert manages certification.

05

Govern IT

Maintain

Review controls, update evidence and prepare for renewal.

Start with a Gold readiness assessment

We scope the work and costs around your systems, controls and gaps.

Five levels. A practical focus on Gold.

Choose the target that fits your customers, risk and commercial goals. ITFR focuses on helping established SMBs work toward Gold, with higher tiers adding independent verification.

Bronze

Level 1

Cyber security foundations.

Silver

Level 2

Extends the control baseline.

Gold

Level 3 · Our focus

Broader security and governance controls.

Platinum

Level 4 · Verified

Adds independent verification.

Diamond

Level 5 · Verified

The highest maturity tier.

Bronze, Silver and Gold use director attestation. Platinum and Diamond include independent verification. Confirm current requirements with CyberCert.

What the implementation work can cover

Identity and devices

Access, MFA and endpoint configuration.

Recovery and response

Backup, recovery and incident planning.

Policies and people

Security policies, awareness and responsibilities.

Records and evidence

Asset records, reports and proof that controls operate.

Cyber insurance value

More value from stronger security

Eligible SMB1001 Gold certified businesses may qualify for premium savings of up to 35% through Cyber Threat Insure. The same controls and evidence used for Gold can support a clearer insurance conversation.

Subject to eligibility, current offer availability, underwriting, risk profile and policy terms. Certification does not guarantee a discount or cover.

35%

Potential savings on eligible cyber liability premiums*

Before you start

Your questions, answered

Who does what during certification?
ITFR identifies gaps, implements agreed improvements and prepares evidence. An authorised director completes the attestation, and CyberCert manages certification.
Do we need to start from scratch?
No. We review existing controls and evidence first, then focus on the gaps that matter for your target level.
How much will it cost?
Cost depends on your systems, current controls and internal capacity. We assess first and agree the implementation scope before work begins.
Will Gold help with tenders?
Gold can support supply-chain and customer assurance, although every tender and customer retains its own requirements.
What happens after certification?
Controls need to keep operating and evidence must remain current. We can support ongoing reviews and renewal preparation.

Ready to work toward SMB1001 Gold?

Tell us what your customers are asking for and where you are today. We’ll identify the most practical next step.