Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cybersecurity Risks

This page includes resources that provide overviews of common cybersecurity risk and how to manage those threats. 

Risks & Threats

  • Ransomware – a consolidated website with information on ransomware alerts, reports, and resources from CISA, the FBI, and other federal partners.
    Cybersecurity and Infrastructure Security Agency
     
  • Phishing – an overview of phishing and tips for protecting your business from phishing attacks
    Federal Trade Commission
     
  • Cyber Threats to Mobile Phones – risks to cell phones and personal data assistants and tips to protect them
    Department of Homeland Security
     
  • Business Email Compromisealso known as email account compromise (EAC), criminals send an email message that appears to come from a known source making a legitimate request.
    Federal Bureau of Investigation 

Risk Management

  • Guide to Conducting Risk Assessments - The purpose of Special Publication 800-30 is to provide guidance for conducting risk assessments of federal information systems and organizations.
    National Institute of Standards and Technology
     
  • Take Stock. Know What Sensitive Information You Have - Know what personal information you have in your files and on your computers.
    Federal Trade Commission
     
  • Baldrige Cybersecurity Initiative - The Baldrige Cybersecurity Excellence Builder is intended for use by leaders and managers—senior leaders, chief security officers, and chief information officers, among others—who are concerned with and responsible for mission-driven, ­cybersecurity-related policy and operations. 
    Baldrige Cybersecurity Initiative

Content outlined on the Small Business Cybersecurity Corner webpages contains documents and resources from our contributors. These resources were identified by our contributors as information they deemed most relevant and timely—and were chosen based on the current needs of the small business community.  Certain commercial entities may be identified in this Web site or linked Web sites. Such identification is not intended to imply recommendation or endorsement by NIST, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose.

Created February 7, 2019, Updated August 24, 2026
Was this page helpful?