Publications
Further development of this draft has ceased (November 03, 2016).
Small Business Information Security: the Fundamentals
Documentation
Topics
Date Published: December 2014
Comments Due:
Email Questions to:
Author(s)
Richard Kissel (NIST), Hyunjeong Moon (NIST)
Announcement
NIST, as a partner with the Small Business Administration and the Federal Bureau of Investigation in an information security awareness outreach to the small business community, developed this NISTIR as a reference guideline for small businesses. This document is intended to present the fundamentals of a small business information security program in non-technical language.
NIST, as a partner with the Small Business Administration and the Federal Bureau of Investigation in an information security awareness outreach to the small business community, developed this NISTIR as a reference guideline for small businesses. This document is intended to present the fundamentals of a small business information security program in non-technical language.
NIST, as a partner with the Small Business Administration and the Federal Bureau of Investigation in an information security awareness outreach to the small business community, developed this NISTIR as a reference guideline for small businesses. This document is intended to present the fundamentals...
See full abstract
NIST, as a partner with the Small Business Administration and the Federal Bureau of Investigation in an information security awareness outreach to the small business community, developed this NISTIR as a reference guideline for small businesses. This document is intended to present the fundamentals of a small business information security program in non-technical language.
Hide full abstract
Keywords
small business information security; cybersecurity fundamentals
Control Families
Access Control; Awareness and Training; Configuration Management; Contingency Planning; Identification and Authentication; Media Protection; Physical and Environmental Protection; Planning; Personnel Security; System and Services Acquisition; System and Communications Protection; System and Information Integrity
