This page includes resources that provide overviews of common cybersecurity risk and how to manage those threats.
Risks & Threats
- Ransomware – a consolidated website with information on ransomware alerts, reports, and resources from CISA, the FBI, and other federal partners.
Cybersecurity and Infrastructure Security Agency
- Phishing – an overview of phishing and tips for protecting your business from phishing attacks
Federal Trade Commission
- Cyber Threats to Mobile Phones – risks to cell phones and personal data assistants and tips to protect them
Department of Homeland Security
- Business Email Compromise –also known as email account compromise (EAC), criminals send an email message that appears to come from a known source making a legitimate request.
Federal Bureau of Investigation
Risk Management
- Guide to Conducting Risk Assessments - The purpose of Special Publication 800-30 is to provide guidance for conducting risk assessments of federal information systems and organizations.
National Institute of Standards and Technology
- Take Stock. Know What Sensitive Information You Have - Know what personal information you have in your files and on your computers.
Federal Trade Commission
- Baldrige Cybersecurity Initiative - The Baldrige Cybersecurity Excellence Builder is intended for use by leaders and managers—senior leaders, chief security officers, and chief information officers, among others—who are concerned with and responsible for mission-driven, cybersecurity-related policy and operations.
Baldrige Cybersecurity Initiative
Content outlined on the Small Business Cybersecurity Corner webpages contains documents and resources from our contributors. These resources were identified by our contributors as information they deemed most relevant and timely—and were chosen based on the current needs of the small business community. Certain commercial entities may be identified in this Web site or linked Web sites. Such identification is not intended to imply recommendation or endorsement by NIST, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose.