SMB1001:2026 Makes DMARC Enforcement Mandatory for Small Businesses — Here Is What That Means

Wed, 27 May 2026 08:00:00 +0000

For years, DMARC enforcement felt like an enterprise problem. Large organizations had the IT staff to navigate DNS configuration, aggregate reporting, and the careful source-discovery work required to move from p=none to p=reject without disrupting legitimate mail. Smaller organizations sat at p=none indefinitely, technically compliant with the minimum requirements from Google and Microsoft, but practically unprotected.

That picture is changing. The 2026 edition of the SMB1001 international cybersecurity standard — published by Dynamic Standards International and certifiable from January 2026 — now mandates DMARC enforcement for small and medium businesses seeking Gold certification. It is the first major international cybersecurity standard designed specifically for SMBs to draw a hard line between monitoring and protection.

Smb on Daily DMARC News

SMB1001:2026 Makes DMARC Enforcement Mandatory for Small Businesses — Here Is What That Means