Abilay is governance in a box — everything a small business needs to be cyber-compliant and resilient, ready to deliver under your brand. Be the guide who leads every client through SMB1001, one phase at a time, out of the dark and into full light. Your pricing, your brand, your margin.
You already run their IT. Abilay adds the second S — managed security and compliance — without you building a practice from scratch. Abilay maps the controls and writes the SMB1001 policy set; your client refines it with AI assistance, at their discretion. You keep the relationship, the brand, and the margin — and you become the authority your clients navigate by.
A multi-tier cyber security certification standard published by Dynamic Standards International (DSI), purpose-built for small and medium businesses — not a cut-down enterprise framework.
Five cumulative levels across five governance domains, refreshed in an annual edition so requirements track the real threat landscape.
CyberCert is a DSI-licensed certification body — the organisation authorised to issue SMB1001 certifications. When your client certifies, the certificate comes from the certification body, in the client's own name and ABN.
Abilay is an independent cyber capability SaaS, aligned to SMB1001. It builds and maintains the governance layer — the document suite, control mappings and evidence — that gets a client ready to certify.
Be the guide your clients navigate by. From the dark of new moon to the full moon of complete resilience, you lead the ascent through SMB1001 — Tier Level One to Tier Level Five, one phase at a time.
Where every business begins — in the dark. Firewall, antivirus, patching, backups, password discipline and a support relationship are established and self-attested by the director. You lead; Abilay provides the policy set and assembles the evidence — refined with AI at the client's discretion — so the first step into the light is the easy one.
Behind every phase is a relationship. You onboard them, you guide each step, and you're the name they call when it matters. Abilay stays invisible — your brand, your client, start to finish.
Governance in a box. Core is your clients' information security management system — the SMB1001 policy, evidence and signed documents, set up under their own ABN, live today and delivered under your brand.
Compliance isn't paperwork; it's proof. SMB1001-aligned evidence is exactly what insurers, regulators, organisations and governments increasingly want to see. Hover a group to see what they're looking for.
Underwriters want proof, not promises. A current, mapped SMB1001 control set supports cyber cover — and can mean better premiums.
Demonstrate due diligence against your obligations: a live control set and signed policy, ready to produce on request.
Win and keep contracts. Give procurement and vendor-risk teams the supplier assurance they ask for — under one recognised standard.
Public-sector buyers increasingly require suppliers to show cyber maturity. SMB1001 gives an SMB a clear, recognised way to qualify.
Set any annual price above the tier RRP. The first 50 MSP signups keep 80% of the margin; MSP 51 onward keep 70% — and everything that matters, the client, the upsell stack and the renewal, stays with you.
The client relationship, the upsell stack and founding 80% margin live with your MSP. The ISMS is issued under the client's own ABN — they own it; you keep the relationship.
Abilay generates a complete SMB1001-aligned policy set, mapped to the exact controls each tier requires. The AI writer sits beside it — yours and your client's to use at your discretion. Rework a section, shift the tone from formal to approachable, or translate the whole policy across 20+ languages. You decide what changes; nothing edits itself.
A structured, approachable path you walk every client through — no technical background required.
Security starts at the top, not in IT.
Focus on what matters. Don't boil the ocean.
You can't protect what you don't know.
Skip the matrices. Ask the hard questions.
20% of effort, 80% of protection.
Security breaks when people stay silent.
Security is a habit, not a one-time project.
Bring your first client onto Abilay and take their first step today.
Join us →Just as the moon is visible to all, security should be within reach of all. Be the Cyber Authority your clients need — the guide who leads every one of them out of the dark, to full resilience.
