Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Planning Tools & Workbooks

This page contains guides, online tools, and workbooks to help you evaluate your business’ current approach to cybersecurity and plan for improvements.

Cybersecurity Resources Roadmap - helps small and midsize businesses select the most useful cybersecurity resources based on needs
Department of Homeland Security

Cyber Insurance – tips on choosing a cyber insurance policy
Federal Trade Commission

FCC Cyber Planner - The Small Biz Cyber Planner 2.0 is an online resource to help small businesses create customized cybersecurity plans.
Federal Communications Commission – This website has many cybersecurity resources (such as tutorials) for small businesses doing business with the Federal Government and announcements for cybersecurity events.
Small Business Innovation Research (SBIR) and Small Business Technology Transfer (STTR)

US Air Force CISO’s “Blue Cyber” Small Business Cybersecurity – From the Office of the Air Force CISO, “Blue Cyber” has training videos, presentations and memos for defense industrial base small businesses to help them align to cybersecurity best practices. The program includes an “Ask Me Anything” event on Tuesdays.
Office of the Air Force CISO

Content outlined on the Small Business Cybersecurity Corner webpages contains documents and resources from our contributors. These resources were identified by our contributors as information they deemed most relevant and timely—and were chosen based on the current needs of the small business community.  Certain commercial entities may be identified in this Web site or linked Web sites. Such identification is not intended to imply recommendation or endorsement by NIST, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose.

Created February 7, 2019, Updated September 16, 2022