Gold
Claim Your usecure Powered CyberCert Credits.
SMB1001 does not only assess technology. It assesses people and policies: are staff trained, are they tested, are security policies written down and signed off. No firewall or endpoint tool can answer those. usecure can. As the Human Risk Intelligence platform built for MSPs, usecure closes the two domains of the standard that the rest of the stack leaves untouched, from the SMB on the tools right through to the enterprise managing them in their supply chain.
To qualify:
Claim your usecure NFR license and roll out training, phishing simulations and policy management across your own MSP to lift your own human risk posture. This earns you a sponsored CyberCert Certification Credit for your own business.
Roll usecure out across your CyberCert programs of work and onboard SMB clients. Every client you secure with usecure earns you another sponsored Certification Credit.
Apply to get started.
Fill out the form today to apply for your Sponsored Credits, powered by usecure. Add any questions in the comments too!
Powered by
usecure meets the Education and Training and the Policies, Processes and Plans domains of SMB1001. Full certification at each tier also requires controls outside usecure, such as the firewall, antivirus, endpoint detection and response, multi-factor authentication, and backup and recovery, which usecure pairs with the rest of your stack to complete. Credits fund CyberCert certification subscriptions and do not guarantee certification, which is earned through independent assessment by CyberCert.
Why usecure
+ CyberCert.
By the time you reach the people-and-policy controls, the technical work is usually done. What is left is the part that means chasing humans: getting staff through training, running a phishing test, writing the policies and collecting sign-off, then proving all of it happened. It is the most manual part of certification, and the easiest to leave half-finished. usecure was built to automate exactly this.
The human half of the standard.
This is what makes usecure different from the rest of the stack, and it is not annual click-through training. usecure is Human Risk Intelligence: it measures each person's risk, automatically enrolls them in training that targets their gaps, runs phishing simulations that coach the moment someone slips, and distributes policies that capture a signed acknowledgment. Every action rolls into one Human Risk Score and one audit trail. So you do not just meet the education and policy controls, you generate the evidence to attest them, in one export rather than three.
Where usecure meets the standard.
usecure covers the two SMB1001 domains no security tool touches:
- uLearn delivers automated, personalized security awareness training, meeting the Education and Training controls
- uPhish runs automated phishing simulations and auto-enrolls anyone who slips into targeted training
- uPolicy distributes security policies and captures signed acknowledgments, meeting the controls in the Policies, Processes and Plans domain
- uBreach monitors the dark web for exposed client credentials and triggers remediation
- The Human Risk Score and audit-ready reporting give you the evidence to attest the human and policy controls
What's Included?
The usecure Human Risk Intelligence platform, multi-tenant and white-label, built for MSPs to run across every client.
A sponsored CyberCert Certification Credit for every client you onboard and secure with usecure.
uLearn automated security awareness training, with adaptive, personalized learning paths, meeting the Education and Training controls.
uPhish automated phishing simulations, with ready-made templates and automatic remediation of users who slip.
uBreach dark web credential monitoring, with uBreach Pro for deeper breach insight and client risk reports.
uPolicy policy management, with a library of templates, centralized distribution, signed acknowledgments and version control, meeting the policy controls.
The Human Risk Score, a single metric across each user, team and client, updated continuously.
Audit-ready reporting that centralizes training, phishing and policy evidence into one trail.
Low-admin automation, with AutoEnrol and AutoPhish keeping programs running with minimal manual upkeep.
An NFR license for your MSP, earning your first sponsored CyberCert Certification Credit.
The bigger picture.
Enterprise clients are increasingly requiring their SMB suppliers to hold cyber certifications. The technical controls are well covered by today's security tools. The controls that get clients stuck are the human ones: training that never quite finishes, policies that were never formally signed, and no clean way to prove either.
usecure and CyberCert close that gap. The MSP runs the rollout. usecure meets the education and policy controls and produces the evidence to prove them. CyberCert provides the independent certification. And the enterprise gets real, verifiable evidence that their supply chain is cyber secure.