Small Business Information Security: The Fundamentals

Paulsen, Celia; Toth, Patricia

doi:https://doi.org/10.6028/NIST.IR.7621r1

NISTIR 7621 Rev. 1

Small Business Information Security: The Fundamentals

Documentation Topics

Date Published: November 2016

Supersedes: NISTIR 7621 (10/01/2009)

Author(s)

Celia Paulsen (NIST), Patricia Toth (NIST)

Abstract

NIST developed this interagency report as a reference guideline about cybersecurity for small businesses. This document is intended to present the fundamentals of a small business information security program in non-technical language.

Keywords

cybersecurity; fundamentals ; ; information security; small business

Control Families

Access Control; Awareness and Training; Configuration Management; Contingency Planning; Identification and Authentication; Media Protection; Personnel Security; Physical and Environmental Protection; Planning; System and Communications Protection; System and Information Integrity; System and Services Acquisition

Documentation

Publication:
NISTIR 7621 Rev. 1 (DOI)
Local Download

Supplemental Material:
Press Release (other)
"Ignoring Cybersecurity is Risky Business" (blog post) (other)

Related NIST Publications:
ITL Bulletin

Document History:
11/03/16: NISTIR 7621 Rev. 1 (Final)

Topics

Security and Privacy
awareness training & education; planning

Applications
small & medium business