Small Business Information Security: The Fundamentals

A short toolkit built around six areas of cyber readiness, with separate action lists for leaders and for whoever actually runs the systems. Every chapter ends with concrete first steps, which makes it a good starting point for a team with no security program yet.

Cybersecurity and Infrastructure Security Agency

A planning guide that walks a small business through twelve areas of cyber security, from privacy and data security to scams, website security, mobile devices, payment cards and incident reporting. Each section ends with concrete actions and a glossary explains the terms as they appear.

Federal Communications Commission

Eighteen chapters of best practice covering asset inventory, secure configuration, access control, authentication, network security, malware protection, logging, cryptography, teleworking, supply chain risk, backups, incident handling and business continuity. Opens with a section on security architecture and risk assessment.

National Cybersecurity Authority

A short awareness guide for organizations that handle sensitive personal data, explaining what cyber security is, how ransomware and phishing reach staff, and the practical steps a team can take to protect records and keep services running.

Skills for Care