NIST releases cybersecurity guide for solopreneurs
NIST published Small Business Cybersecurity: Non-Employer Firms, a lay-language guide that helps solopreneurs implement selected actions from the NIST Cybersecurity Framework. It includes recommended actions, rationale, and worksheets.
- Framework
- NIST CSF
- Who it concerns
- Solopreneurs, defined as anyone who is a business's sole paid employee.
What changed?
Each point with the sentence from the source that says it.
The guide recommends changing default passwords on devices and creating unique, strong passwords.
One recommended action is to change the default passwords that a manufacturer assigns to a device, as is common with Wi-Fi routers and other networked items.
The guide highlights regular data backups and maintaining updated software as best practices that significantly reduce cybersecurity risks.
We highlight a set of actionable best practices that significantly reduce cybersecurity risks. These include regular data backups and maintaining updated software.
The guide includes worksheets for inventorying at-risk assets and tracking actions taken.
Closing the document is a set of tools to help with implementing the central section’s actions, such as worksheets for inventorying at-risk assets or tracking all the actions the business has taken.
Which policies should you review?
Suggested from the change above. Check the source before you edit.
- Asset Management Policy
Review asset inventory practices to include devices used in the business and ensure default passwords are changed.
- Data Security Policy
Review data backup procedures to ensure regular backups are performed and software is kept updated.