The new guide targets more than 28 million non employer firms in the US and turns the NIST Cybersecurity Framework into a short list of steps that take little time or technical skill to carry out.
NIST, the US standards agency, has released Small Business Cybersecurity: Non-Employer Firms, an update to an earlier guide for small businesses. Unlike its predecessor, the new publication focuses narrowly on cybersecurity and targets so called solopreneurs, meaning owners who are the sole paid worker in their own business. NIST counts more than 28 million US small businesses in this category. The guide assumes no prior knowledge and explains technical terms in plain language.
The publication draws on the established NIST Cybersecurity Framework and selects a limited set of actions that require little time or technical effort, such as regular data backups, keeping software current, and replacing default passwords on routers and other connected devices. For each action, the guide explains the reasoning, offers a simple way to get started, and suggests options for later as the business grows. Worksheets for tracking risks and three example cases, including a lawyer, a craft business and a consultant, help readers apply the advice to their own situation.
NIST author Daniel Eliot points out that the guide cannot cover every need of every solo business owner, but offers a solid starting point for those currently working without any strategy at all. It remains an open question whether busy solo owners will actually find time to work through the recommendations, even though each step on its own is manageable. Anyone running a solo business with connected devices or online payments at least gets a concrete order of steps to start with.
What this means for decision-makers
- Download the new NIST guide and start with data backups and software updates.
- Replace default passwords on routers and other connected devices in your business.
- Use the guide worksheets to list your biggest risks and set clear priorities.
This story was produced automatically from the source named above and checked by software before publication. The image is symbolic and shows neither the event nor a real person. How this paper is made