Fundamentals of Small Business Information Security

Paulsen, Celia; Feldman, Larry; Witte, Gregory

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

ITL Bulletin

Fundamentals of Small Business Information Security

Documentation Topics

Date Published: March 2017

Editor(s)

Celia Paulsen (NIST), Larry Feldman (G2), Gregory Witte (G2)

Abstract

This bulletin summarizes the information in NISTIR 7621, Revision 1: Small Business Information Security: The Fundamentals. The bulletin presents the fundamentals of a small business information security program.

Keywords

small business, information security, cybersecurity, fundamentals

Control Families

Access Control; Awareness and Training; Configuration Management; Contingency Planning; Identification and Authentication; Media Protection; Physical and Environmental Protection; Planning; Personnel Security; System and Services Acquisition; System and Communications Protection; System and Information Integrity

Documentation

Publication:
March 2017 ITL Bulletin (pdf)

Supplemental Material:
None available

Related NIST Publications:
IR 7621 Rev. 1

Document History:
03/13/17: ITL Bulletin (Final)

Topics

Security and Privacy

awareness training & education, planning

Applications

cybersecurity education, small & medium business

Laws and Regulations

Cybersecurity Strategy and Implementation Plan, Federal Information Security Modernization Act