Small Business Information Security: The Fundamentals

Paulsen, Celia; Toth, Patricia

doi:https://doi.org/10.6028/NIST.IR.7621r1

NIST IR 7621 Rev. 1

Small Business Information Security: The Fundamentals

Documentation Topics

Date Published: November 2016

Supersedes: IR 7621 (10/01/2009)

Author(s)

Celia Paulsen (NIST), Patricia Toth (NIST)

Abstract

NIST developed this interagency report as a reference guideline about cybersecurity for small businesses. This document is intended to present the fundamentals of a small business information security program in non-technical language.

Keywords

cybersecurity; fundamentals ; ; information security; small business

Control Families

Access Control; Awareness and Training; Configuration Management; Contingency Planning; Identification and Authentication; Media Protection; Physical and Environmental Protection; Planning; Personnel Security; System and Services Acquisition; System and Communications Protection; System and Information Integrity

Documentation

Publication:
https://doi.org/10.6028/NIST.IR.7621r1
Download URL

Supplemental Material:
Press Release
"Ignoring Cybersecurity is Risky Business" (blog post)

Related NIST Publications:
ITL Bulletin

Document History:
11/03/16: IR 7621 Rev. 1 (Final)

Topics

Security and Privacy

awareness training & education, planning

Applications

small & medium business