Critical Infrastructure Cyber Community Voluntary Program | US-CERT

Source: Critical Infrastructure Cyber Community Voluntary Program | US-CERT

US-CERT Critical
Infrastructure Cyber Community Voluntary Program

Getting
Started for Small and Midsize Businesses (SMB)

Cybersecurity is
critical to any business enterprise, no matter how small.  However,
leaders of small and midsize businesses (SMB) often do not know where to begin,
given the scope and complexity of the issue in the face of a small staff and
limited resources.

To help business
leaders get started, DHS has provided a list of top resources specially
designed to help SMBs recognize and address their cybersecurity risks.

C³ Voluntary Program SMB Toolkit

This packet contains
resources specially designed to help SMBs recognize and address their
cybersecurity risks.  Resources include talking points for CEOs, steps to
start evaluating your cybersecurity program, and a list of hands-on resources
available to SMB.  

1.      
Toolkit for Small and Midsize Businesses (SMB) Table of Contents

2.      
Begin the Conversation: Understanding the Threat Environment

3.      
Getting Started: Top Resources for SMB

4.      
Cybersecurity for Startups

5.      
C³ Voluntary Program Outreach and Messaging Kit

6.      
SMB Leadership Agenda

7.      
Hands-On Resource Guide

Stop.Think.Connect. Toolkit

The Stop.Think.Connect.™ campaign has an online Toolkit that
includes information specific to SMBs. The Toolkit can be found at http://www.dhs.gov/stopthinkconnect-toolkit or www.stcguide.com(link is external).

Small Business Administration (SBA) Training

This 30 minute, self-paced training exercise provides an
introduction to securing information in small businesses.  For more
information, please visit: https://www.sba.gov/tools/sba-learning-center/training/cybersecurity-small-businesses.

Federal Small Biz Cyber Planner

This tool helps businesses create custom cybersecurity plans.
The Small Biz Cyber Planner includes information on cyber insurance, advanced
spyware, and how to install protective software.  For more information,
please visithttp://www.fcc.gov/cyberplanner.

Internet Essentials for Business 2.0

This guide for business owners, managers, and employees focuses
on identifying common online risks, best practices for securing networks and
information, and what to do when a cyber incident occurs. For more information,
please visit:https://www.uschamber.com/internet-security-essentials-business-20(link is external).

NACD Cyber-Risk Oversight Handbook

The National Association of Corporate Directors (NACD), in
conjunction with AIG and the Internet Security Alliance, has identified five
steps all leadership and management teams should consider as they seek to
enhance their oversight of cyber risks. The NACD Cyber-Risk Oversight Handbook
can be found here: http://www.nacdonline.org/cyber.