Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Cybersecurity Insights
a NIST blog
For small businesses who are often confronted with limited resources, knowing how to get started and where to find support with planning, implementing, or evaluating a cybersecurity risk management strategy can be challenging — sometimes making cybersecurity feel like an insurmountable hurdle. However, there is good news. Many non-profit organizations across the United States have created programs for their local small business communities (in addition to local schools, municipal governments, and non-profits) that often extend beyond general cybersecurity education to include services like conducting risk assessments and penetration tests, performing compliance consulting services, helping with incident preparedness and response measures, and more.
The NIST Small Business Cybersecurity Support Program Finder brings these programs together into one tool, connecting small businesses with local non-profit community partners who help with cybersecurity risk management.
Explore the Tool
Selecting a state on the interactive map will present a list of programs, as shown in the graphic below. A table of programs alphabetized by state is also provided below the map for users to browse.
Add to the Tool
The list is not exhaustive, and we’d love your help building it out. Programs must be hosted by non-profit institutions and have dedicated services helping their region’s small business community proactively manage cybersecurity risks. To be considered for inclusion on the list, submit a request to smallbizsecurity [at] nist.gov (smallbizsecurity[at]nist[dot]gov). Include program name, host institution, state, and URL.
An Expanding Portfolio of Small Business Cybersecurity Resources
NIST regularly works in collaboration with and in support of organizations of all sizes. The NIST Small Business Cybersecurity Act, which became law on August 14, 2018, directed NIST to “disseminate clear and concise resources to help small business concerns identify, assess, manage, and reduce their cybersecurity risks.” The NIST Small Business Cybersecurity Corner was created to serve as the hub of NIST’s small business cybersecurity programming to connect the small business community (and other under-resourced organizations) with free educational cybersecurity resources from not just NIST, but across the U.S. Government and non-profits. These resources include videos, quick-start guides, information organized by topic and sector, and more. Many of the resources on this site are leveraged by programs included in the NIST Small Business Cybersecurity Support Programs Finder.
Stay Engaged
- Join the NIST Small Business Community of Interest, which was established to convene the public and private sectors to share business insights, expertise, challenges, and perspectives to guide our work and assist NIST in addressing the cybersecurity needs of the small businesses community.
- Attend an event. All upcoming and past NIST small business cybersecurity webinars are posted here. Our next webinar will be on October 29, 2026, from 2:00-3:00pm ET to provide an overview of the new Assessing Security Requirements for Controlled Unclassified Information (CUI): NIST Special Publication 800-171A, Revision 3 Small Business Primer.
Non-Endorsement
The NIST Small Business Cybersecurity Support Programs Finder is provided as a public service of the National Institute of Standards and Technology. Users of the tool are not permitted to use the name or logo of NIST in any advertisement, promotion, news release or other type of statement, written or verbal, in any way that implies a NIST endorsement, certification or approval of any company, product or service. NIST does not vouch for or validate the programs listed within the tool.
