Security Assurance Level adapted to small and medium-sized enterprises: a framework for assessing the maturity of cybersecurity processes calibrated to the resources, organizational complexity, and operational constraints typical of SMEs. Covers essential controls, proportional risk management, basic regulatory compliance, and scalable protection measures.