An Introduction to Cyber Security

A short toolkit built around six areas of cyber readiness, with separate action lists for leaders and for whoever actually runs the systems. Every chapter ends with concrete first steps, which makes it a good starting point for a team with no security program yet.

Cybersecurity and Infrastructure Security Agency

Explains how to work out which information matters most to a business, then apply the identify, protect, detect, respond and recover functions at a scale a small team can sustain. Includes worksheets for cataloguing information and rating what it is worth.

Celia Paulsen, Patricia Toth

A planning guide that walks a small business through twelve areas of cyber security, from privacy and data security to scams, website security, mobile devices, payment cards and incident reporting. Each section ends with concrete actions and a glossary explains the terms as they appear.

Federal Communications Commission

Eighteen chapters of best practice covering asset inventory, secure configuration, access control, authentication, network security, malware protection, logging, cryptography, teleworking, supply chain risk, backups, incident handling and business continuity. Opens with a section on security architecture and risk assessment.

National Cybersecurity Authority