SMB1001 for MSPs
Your clients will be asked for proof. Be the MSP who can hand it over.
Insurers, tenders and larger customers now ask small businesses to prove their security, not describe it. SMB1001 Gold turns the work you already do into a certificate your client can show. CYBERWHITE assesses every client tenant and keeps the evidence, so you can deliver Gold across your whole client base.
Proof check: we scan one client tenant with you and show what an assessor would still ask for. CYBERWHITE is a DSI Licensed Commercial Holder of SMB1001 and a DSI Founding Mission Supporter.
Why SMB1001 is landing on your desk
ASD has announced that the Essential Eight will evolve into a new Essentials series, with the first chapter aimed at enterprise IT. Essential 8 stays the benchmark for government work through the transition. For small businesses, though, SMB1001 is the standard that ends in a certificate a director can sign and a supplier can check.
The 2027 edition of SMB1001 goes further. It defines the Technical Support Specialist role and tells businesses that their existing MSP is usually the right place to start. The standard is pointing your clients at you.
Configuration tools harden the tenant. CYBERWHITE proves it.
If you already run a baseline tool, keep it. When a client's insurer or assessor asks for evidence, a hardened tenant is not the same as a proven one.
Evidence per control
Every control shows what was checked, when, and the result. Honest "needs review" where a scan cannot see the answer.
Beyond the tenant
SMB1001 Gold is part paperwork: policies, insurance, training, registers. Those controls are tracked through attestation alongside the scan.
Built on the standard
Assessments run on the licensed SMB1001 standard text, so the gap list matches what the certification asks for.
How MSPs turn SMB1001 into revenue
Readiness project
A fixed-fee project to take a client to Bronze, Silver or Gold: scan, close the gaps, write the policies, prepare the attestation.
Monthly compliance service
Re-scan, keep evidence current, and answer the next supplier or insurance questionnaire in a day instead of a week.
Annual recertification
Certificates last one year and the standard updates every year. Recertification is predictable, repeat work.
Upgrade projects
Each step up a tier, and each new edition, brings quotable work: AI policies, device management, stronger admin sign-in.
What you charge is your call. Want to model it with your own numbers? Try the MSP revenue calculator.
Built for a client base, not one tenant
- Assess every client tenant from one dashboard, with per-client progress by tier
- Team access with assigned clients, so engineers see only their accounts
- Evidence packs per client, ready for the director, insurer or assessor
- Essential 8 and SMB1001 from the same Microsoft 365 scan
MSP plans
Launch (1 to 5 client tenants) $199 AUD/month · Partner (6 to 10) $399 · Managed (11 to 20) $799 · Portfolio (21 to 50) $1,499 · Enterprise (50+) custom.
Frequently asked questions
Can an MSP certify its clients to SMB1001?
An MSP cannot sign the certificate, but it can do everything else. Bronze, Silver and Gold are certified by the client director through self-attestation. The MSP sets up the controls, keeps the evidence and prepares the attestation for the director to sign. Platinum and Diamond need an independent certifier.
What does SMB1001:2027 say about MSPs?
The 2027 edition defines the Technical Support Specialist role and asks businesses to engage one under its first measure. It notes that a business already using an MSP will usually find that is the right place to start.
We already use a configuration tool to harden tenants. Why add CYBERWHITE?
Keep it. Configuration tools harden the tenant. CYBERWHITE proves the tenant meets the standard, control by control, with evidence an assessor or insurer can read, and covers the policy and process controls a configuration tool cannot see.
How do MSPs price SMB1001 work?
Common models are a fixed-fee readiness project to reach a tier, a monthly compliance service that keeps evidence current, and annual recertification, since certificates last one year. The price is the MSP's choice. CYBERWHITE MSP plans start at $199 AUD per month.
See what an assessor would still ask for
Book a free proof check. We scan one client tenant with you and show the evidence gaps, control by control.