{"id":469,"date":"2019-04-16T11:43:02","date_gmt":"2019-04-16T11:43:02","guid":{"rendered":"https:\/\/eset-blog.aist.fun\/nist-cybersecurity-resources-for-smaller-businesses\/"},"modified":"2019-06-18T10:46:35","modified_gmt":"2019-06-18T07:46:35","slug":"nist-cybersecurity-resources-for-smaller-businesses","status":"publish","type":"post","link":"https:\/\/blog.eset.ee\/et\/en\/2019\/04\/16\/nist-cybersecurity-resources-for-smaller-businesses\/","title":{"rendered":"NIST cybersecurity resources for smaller businesses"},"content":{"rendered":"\n

How can smaller businesses address their cybersecurity risks without the resources of large organizations?<\/p>\n\n\n\n

There are a lot of challenges to being a small-business owner, including safely managing technology. Every risk can have an outsized effect on your ability to stay in business. And resources for protecting your business are often geared towards much larger organizations. The National Institute of Standards and Technology (NIST) aims to change that, with the release of their Small Business Cybersecurity Corner<\/a>.<\/p>\n\n\n\n

How is protecting a smaller business different?<\/strong><\/h2>\n\n\n\n

On a fundamental level, the techniques needed to protect a small business aren\u2019t all that different from those needed to protect a very large organization. The biggest differences boil down to complexity, expertise, and resilience.<\/p>\n\n\n\n

A small network will necessarily be a lot less complex, which means it can be easier to protect. But if you don\u2019t have the expertise to know whether you\u2019ve adequately protected your data and devices, that simplicity is largely irrelevant. And while the cost of a security incident may be lower because of a small number of records or machines affected, if it\u2019s a huge percentage of a small amount of profit, it can be very difficult for businesses to bounce back<\/a>.<\/p>\n\n\n\n

Existing advice for assessing and protecting against cybersecurity risks can often seem overwhelming to those who aren\u2019t computer experts. But now, there\u2019s a specific resource that speaks to smaller businesses<\/a>. And it uses more approachable language, to help smaller companies understand their specific risks as well as the measures used to mitigate them.<\/p>\n\n\n\n

NIST resources for small businesses<\/strong><\/h2>\n\n\n

The \u201cFor Managers\u201d section covers security from a management perspective. This includes Board-level discussions of security and risk, topics of discussion for CEOs considering their company\u2019s security posture, improving security culture at all levels of the organization, and how to hire new security staff.<\/p>\n

<\/p>\n


\nThe Glossary is just what you\u2019d expect, and it covers several dozen terms describing security concepts that are used throughout the site.<\/p>\n

<\/p>\n

<\/p>\n

The \u201cCybersecurity Basics\u201d section is a good place to start for those who are very new to the topic of security, and may be a good review for people who are more familiar. The myths document is likely to be particularly helpful for those who are coming in with some level of security preconceptions.<\/p>\n

<\/p>\n

<\/p>\n