You may see SMB1001 Gold mentioned in an older proposal, tender, customer request or online article. Do not assume that an older description still matches the current framework.
At the time this article was reviewed, the framework and its public status were changing. The current official public site did not provide public tier details or requirements associated with the Gold term. That means this article cannot confirm what Gold currently means, whether that name is still used or what process may apply.
Before planning work or making any claim, check the current official public site. Obtain the current official edition and the named requirements from the organisation responsible for the standard. If those materials are not available, wait or ask that organisation for clarification rather than relying on an old summary.
Start with the request you received
If a customer, insurer, tender or other party has asked about SMB1001 Gold, ask them to identify exactly what they need. Their written request should name the edition, requirements, evidence, assessment process and deadline they will accept.
Do not assume that using the word Gold means every party is asking for the same thing. A request based on an older edition may not match the current standard or current status.
Keep the request and any clarification with your project records. This gives the business a clear source to check before spending time or money.
Use current official material
A copied checklist, sales page or old article is not a substitute for the current official edition. Check the publication date, edition, scope and issuing organisation on the material you receive.
The official material should explain which requirements apply and what evidence or review process is expected. If it does not, seek clarification from the organisation responsible for the standard.
Record when the material was obtained and save the source. Recheck the current official site before submitting evidence or publishing a claim because the framework may change again.
Review your business without labelling the result
You can still improve security while the framework details are being confirmed. Start with the systems that would stop work or expose important information if they failed.
A practical review can identify:
- active users and administrator access
- protection for email and important sign-ins
- supported computers, phones and network equipment
- security monitoring and who responds to warnings
- important information included in backups
- the date and result of the latest restore test
- the steps staff follow when something suspicious happens
These are useful business checks. Completing them does not, by itself, support any SMB1001 status or claim.
Match each statement to evidence
Once you have the current official edition and named requirements, compare each requirement with what the business actually does. Keep dated evidence and record any gaps, exclusions or work still in progress.
Do not describe planned work as complete. Do not say that the business is compliant, certified, assessed or approved unless the current official process supports that exact statement and the business has completed it.
An IT provider can explain technical settings and help collect evidence. The organisation responsible for the standard, and any authorised assessment process it names, remains the source of truth for official status.
Be careful with public claims
Before adding SMB1001 Gold to a website, proposal or tender response, have the wording checked against the current official edition and the status the business has actually obtained. Keep the supporting records with the approved statement.
If the official public site still does not publish the tier details or requirements, say that the status could not be confirmed. A cautious statement is better than a claim based on superseded or unavailable information.
After you obtain the current official material, ask JCPIT about a scoped technical review. We can compare evidence you provide with the named technical requirements, explain gaps and help organise records. We will not promise a certification, tier or assessment outcome.
