Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Small Business Information Security: The Fundamentals



Patricia R. Toth, Celia Paulsen


NIST developed this NISTIR as a reference guideline for small businesses. This document is intended to present the fundamentals of a small business information security program in non-technical language.
NIST Interagency/Internal Report (NISTIR) - 7621 Rev 1
Report Number
7621 Rev 1


small business, information security, cybersecurity, fundamentals


Toth, P. and Paulsen, C. (2016), Small Business Information Security: The Fundamentals, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed May 24, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created November 3, 2016, Updated January 27, 2020