Nexus StandardsIndustry, Trade and Supply ChainsSectors and industries
Area · proposed

Small and medium-sized enterprises

The small and medium-sized enterprises section of the Industry, Trade and Supply Chains subsite addresses firms with limited risk capacity that still carry disaster, cyber and supply-chain exposure: which lightweight continuity, cybersecurity and financial-access records they can keep at low cost, crosswalked to small-business cyber baselines and open procurement, so their resilience becomes visible to lenders and buyers. Every artifact of the area carries a UNI (Unique Nexus Identifier), which identifies and never certifies.

Area recordIndustry, Trade and Supply Chains
  1. TierSectors and industries
  2. Registryproposed area · no registry row yet
  3. Nexus StandardsNS-0, NS-9, NS-10, NS-11
  4. Open standards4
  5. Feeds3 · 0 admitted
  6. Couplings4
  7. Last reviewed2026-10-17

Context entry PROPOSED for the Nexus Standards registry.

UNI
requested · not yet allocated
Status
PROPOSEDproposed area · no registry row yet
Last reviewed
area context bank
Cite this page

Nexus Standards (2026). Small and medium-sized enterprises: area brief, Industry, Trade and Supply Chains (PROPOSED). https://nexustandards.com/industry-trade/small-and-medium-enterprises/. Last reviewed 2026-10-17.

Download the profile

Files carry the credits and the licence line; they are generated in your browser and nothing is sent. Downloads need script.

01Scope

Small and medium-sized enterprises: what the area covers, and what it leaves to others.

The sectors and industries section of Industry, Trade and Supply Chains. Scope as the area context entry states it (PROPOSED).

In scope 5

  • Lightweight business continuity records
  • Basic cybersecurity posture records against small-business baselines
  • Supplier and customer dependency records
  • Access-to-finance and insurance records
  • Participation in public procurement (OCDS)

Out of scope 3

  • Business advice or lending decisions
  • Tax or regulatory filings
  • Personal data of owners

Jurisdictions No jurisdiction note is recorded for this area yet; jurisdiction narrows what applies and never implies that a Nexus profile satisfies a law.

02Nexus Standards that apply

4 Nexus Standards for this area.

The Nexus Standards the area context entry lists. Every one is proposed or specified; none is adopted by an authority.

  1. 01

    NS-0 · Constitution and principles

    Status proposed · 12 rules stated. Read NS-0

  2. 02

    NS-9 · Contextual UNIs (deployments, instances, programme instances)

    Status proposed · 5 rules stated. Read NS-9

  3. 03

    NS-10 · Policies and clauses (machine-readable obligations, enforcement in commons and command rooms)

    Status proposed · 7 rules stated. Read NS-10

  4. 04

    NS-11 · Verification and monitoring (evidence, attestations, zero-trust conformance observation)

    Status proposed · 6 rules stated. Read NS-11

03Open standards

4 open standards, each with its relation.

Relations are register entries (NS-14), never conformance or equivalence statements; hover or focus a relation for its meaning. Names of standards bodies and their standards belong to their stewards and are used only to identify the documents; no text of an external standard is reproduced here.

04Restricted compatibility profiles

1 closed standard, named only.

Closed or paywalled standards appear by name and link only; any compatibility profile of one is built on simulated data and kept on protected pages until an institutional arrangement with the issuing body is recorded. Nexus Standards is not affiliated with, endorsed by or certified by any standards body named here.

05Hazards and sectors

What acts on this area, and who carries it.

Hazards and threats 4

DisastersCyber attacks and ransomwareSupplier failureDemand shocks

Sectors 1

industry
06Systemic couplings

4 couplings to other areas and subsites.

Each coupling names the mechanism that links this area to another; select a card on the canvas to trace it. Mechanisms are stated in the context bank (PROPOSED).

Canvas · the area and its couplingsDesign, not a record
Small and medium-sized enterprises: systemic couplingsThe couplings the area context bank records for Small and medium-sized enterprises: 2 areas in Industry, Trade and Supply Chains, 2 areas in other subsites and 1 subsite reached. Each coupling carries a mechanism stated in the context bank (PROPOSED); a reading aid, not a dependency proof.

Fig.RUNNING marks the area you are reading; DONE an area in the same subsite, QUEUED an area elsewhere and GATE a subsite reached. Tags give reading order only, never a status. Design, not a record.

  1. BankingFinance, Insurance and the EconomySME credit access depends on lenders seeing risk and resilience information.
  2. Industry and manufacturingIndustry, Trade and Supply ChainsSMEs are suppliers to larger manufacturers; their disruption propagates up supply chains.
  3. Tourism and hospitalityIndustry, Trade and Supply ChainsMost tourism businesses are SMEs exposed to destination hazards.
  4. Insurance and reinsuranceFinance, Insurance and the EconomyLow insurance penetration among SMEs widens the protection gap.
07Data and feeds

3 sources, with provider, licence and delivery path.

Sources the area reads or proposes. Delivery follows GRIx first; a source is shown live only after an owner decision admits it for public pages.

Every feed · pending admission

No legal register row admits any of these sources for live display on public pages yet, so nothing is read from them here. A register row that exists records the source for the governed GRIx path; admission for public pages is a separate owner decision.

Admitted
0
none yet
Register row exists
2
recorded for the GRIx path
Proposed row
1
terms to be recorded
Delivery
2 GRIx · 0 plugin · 0 browser · 1 snapshot
GRIx first, then plugin, browser-direct, snapshot
08Readiness

What each pathway can read from this area.

GCRI Canada evidence pathway

GCRI Canada

SME continuity and loss records, aggregated and de-identified, become readable as evidence for GCRI Canada research under its own rules.

Open the GCRI Canada evidence pathway

Recognition pathway

The Global Risks Forum (GRF)

An SME support programme that publishes its clauses and attestations gives GRF a record trail to consider; no recognition is implied.

Open the Recognition pathway

Capital pathway

The Global Risks Alliance (GRA)

SME resilience finance programmes can present verified continuity records to GRA, which assesses capital readiness under its own rules.

Open the Capital pathway

Each institution decides under its own rules what it reads as evidence; no pathway is an approval, a readiness statement or investment advice.

10Audiences

Who works with this area: 4 audiences.

  1. SME owners and associations
  2. SME lenders and microfinance
  3. Chambers of commerce
  4. Public procurement agencies
12Working group

The working-group charter, proposed.

Scope

Profile low-cost continuity, cyber and dependency records for SMEs and crosswalk them to small-business cyber baselines and open procurement.

No working group is chartered yet; a community may charter this one under NS-13 through a docket.

Deliverables · 3
  1. Minimal continuity record profile for SMEs
  2. Crosswalk to NIST CSF 2.0 small-business resources and CISA CPGs
  3. Deploy card for a self-declaration form
Liaison targets · 3
  • OECD Centre for Entrepreneurship, SMEs, Regions and Cities liaison sought
  • SME Finance Forum liaison sought
  • UNDRR Private Sector Alliance (ARISE) liaison sought
13Open problems

3 open problems an expert would start with.

  1. SME losses are rarely captured in national loss databases, so Sendai C-3 understates them.
  2. Small firms cannot afford paywalled continuity standards, so open baselines are needed.
  3. Lenders lack a standard way to read SME resilience information.
14References

4 sourced references.

Peer-reviewed sources and published statistics on the publishers' own domains, as the context entry cites them.

  1. peer-reviewedSupply chain disruptions: evidence from the Great East Japan EarthquakeThe Quarterly Journal of Economics · 2021
  2. published statisticsThe NIST Cybersecurity Framework (CSF) 2.0NIST · 2024
  3. published statisticsThe Global Findex Database 2021World Bank · 2022
  4. published statisticsUnbreakable: Building the Resilience of the Poor in the Face of Natural DisastersWorld Bank · 2017
15Learning

Risk Academy faculties for this area.

Plain links to the faculty pages of Risk Academy; no course, credential, recognition or endorsement is implied.

16Key terms

Terms used on this page.

UNI
Unique Nexus Identifier: identifies and resolves an artifact and its record; it never certifies truth, readiness or approval.
PROPOSED
Drafted content that no authority has adopted. Every area entry here is a proposal to the Nexus Standards registry.
crosswalk
Relation: Nexus clauses are mapped to parts of the external standard by number, never by text.
compatibility profile (restricted)
Relation to a closed or paywalled standard: named and linked only; any profile is simulated and kept on protected pages.
pending admission
No legal register row admits this source for display on public pages yet, so nothing is read from it.
GRIx
The governed data layer of Nexus Foundry: external data is read through it with its licence and source release.
docket
A public change record under NS-13, decided by editors with written reasons.
attestation
An evaluator's recorded result for one clause and one subject under NS-11; never a certification.
liaison sought
A liaison the working group would ask the body for; none is held unless the body confirms it in writing.
18Learn and apply

Where Small and medium-sized enterprises is taught, worked on and run.

Risk Academy disciplines that teach Small and medium-sized enterprises, with their courses; the GCRI Canada, The Global Risks Forum (GRF) and The Global Risks Alliance (GRA) subsites that carry those disciplines; and the Nexus Foundry systems the standards name. Mappings are proposed for review (Risk Academy standards map, 2026-10-17); a link says a page on the same subject exists, never an endorsement or a conformance statement; framework names in course titles are named and linked, never reproduced.

Risk Academy

Disciplines and courses

19Questions

Questions and answers.

Is the Small and medium-sized enterprises area adopted?
No. The area entry is PROPOSED content for the Nexus Standards registry; there is no registry row yet. Adoption of any standard is a recorded authority decision and none is recorded today.
Are the feeds on this page live?
No. Every feed is pending admission: no legal register row admits it for public pages yet, so nothing is read from it here.
How do I change this brief?
Through a docket under NS-13: a pull request against the area context bank or the registry, decided by editors with written reasons.
Nexus Standards

Shape this brief: Small and medium-sized enterprises.

Propose a change, join the working group or name a source. Area entries are PROPOSED content for the Nexus Standards registry; a UNI identifies and never certifies, and nothing on this site is a certification, an approval or a readiness statement.

Nexus Standards documents CC BY 4.0 · tooling Apache-2.0 · counsel review pending (DEC-2026-10-16-NEXUS-STANDARDS-OPEN-LICENCE). External standards are named and linked under their own licences; a UNI (Unique Nexus Identifier) identifies, it never certifies. · Generated from the Nexus Standards corpus at commit 437ae044c5cb (2026-10-17); proposed and open.

Skip to toolbar