Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

All Purpose Guides

Guidance that covers multiple cybersecurity topics

NIST Cybersecurity Framework 2.0:  Small Business Quick Start Guide - provides small-to-medium sized businesses (SMB), specifically those who have modest or no cybersecurity plans in place, with considerations to kick-start their cybersecurity risk management strategy using the NIST Cybersecurity Framework (CSF) 2.0. 
National Institute of Standards and Technology 

NIST Risk Management Framework Small Enterprise Quick Start Guide - This guide is designed to help small, under-resourced entities understand the value and core components of the NIST Risk Management Framework (RMF) and provide a starting point for designing and implementing an information security and privacy risk management program. 
National Institute of Standards and Technology

The Cyber Readiness Playbook - helps you identify critical systems and implement essential cyber policies.
Cyber Readiness Institute

Creating Good Cyber Ready Habits–One Person at a Time – provides tips on how to develop good cyber readiness habits and culture for the workplace
Cyber Readiness Institute

Cross-Sector Cybersecurity Performance Goals – Organized to align with NIST’s Cybersecurity Framework functions, CPGs are a common set of protections that all critical infrastructure entities - from large to small - should implement to meaningfully reduce the likelihood and impact of known risks and adversary techniques.
Cybersecurity and Infrastructure Security Agency

Cybersecurity Basics – basic tips for securing your business
Federal Trade Commission

Cybersecurity Resources Roadmap - helps small and midsize businesses select the most useful cybersecurity resources based on needs
Department of Homeland Security

FCC Cyber Planner - The Small Biz Cyber Planner 2.0 is an online resource to help small businesses create customized cybersecurity plans.
Federal Communications Commission

Start with Security: A Guide for Business – lessons learned from Federal Trade Commission cases that touch on vulnerabilities that could affect your company, along with practical guidance on how to reduce the risks they pose
Federal Trade Commission

Information Security for Small Business: The Fundamentals – NISTIR 7621- provides guidance on how small business can provide basic security for their information, systems, and networks
National Institute of Standards and Technology

GCA Cybersecurity Toolkit for Small Business - assess your security posture, implement free tools, find practical tips, and use free resources and guides to improve your company’s cybersecurity readiness and response
Global Cyber Alliance

Strengthen Your Cybersecurity - Cyberattacks are a concern for small businesses. Learn about cybersecurity threats and how to protect yourself. 
Small Business Administration

Created August 24, 2020, Updated August 24, 2026
Was this page helpful?