Short answer: NIST released a guide for small businesses without IT staff to help with cybersecurity. It covers basic steps like setting strong passwords and keeping software updated. Businesses should follow these steps to protect their data.
TL;DR
- NIST created a guide for small businesses without IT staff.
- Businesses should protect their accounts with MFA.
- Regularly back up data and keep it secure.
What happened?
NIST (National Institute of Standards and Technology) released a guide for small businesses that do not have IT staff. The guide helps these businesses manage cybersecurity risks by providing simple steps, such as enabling multi-factor authentication (MFA) and keeping software up to date. This guide is important for businesses that do not have the resources to hire IT experts, as it offers practical advice to protect their data and operations.
Key facts
| Reported by | Help Net Security |
|---|---|
| Date reported | 04 Nov 2026 |
How it works
NIST created a guide for small businesses without IT staff. The guide uses simple language and covers basic cybersecurity practices. It includes steps like listing devices and accounts, enabling MFA, and backing up data.
- List devices and accounts
- Enable MFA on accounts
- Back up data regularly
Skillmate analyst mapping (our judgement, not from the vendor):
- T1566 Phishing
Timeline
| Date | Event | Source |
|---|---|---|
| 2026-11-04 | Reported by Help Net Security | Help Net Security |
| 2026-11-08 | This Skillmate explainer published | Skillmate |
How to fix it
- Keep the operating system, browser and security software updated.
- Do not open unexpected attachments or install software from unofficial sources.
- Report suspicious files or pop-ups to your IT or security team.
How to detect it
Signs to watch for:
- Unknown programs starting at boot, or new scheduled tasks.
- Security software that was turned off without a reason.
- Unusual outbound connections from a workstation.
What is confirmed
- Reported by Help Net Security
Why it matters
This guide matters as 82% of small businesses in the U.S. fall into this category. It helps protect against cyber threats by educating owners on basic cybersecurity practices.
Learn the skills behind this story
Want to understand attacks like this and defend against them? Join Skillmate cybersecurity training or practise hands-on in Skillmate Labs.
FAQ
How often should I update my software?
Software updates often include security patches. NIST recommends keeping your software up to date to protect against known vulnerabilities.
Do I need a legal agreement with a cybersecurity provider?
Yes, if you hire a cybersecurity provider, it’s important to document the scope of service and who handles each task in a formal agreement to avoid misunderstandings.
Sources
- NIST publishes cybersecurity guide for businesses too small to have IT staff (Help Net Security)
How we wrote this: facts come from the sources above. An on-prem AI model drafted the plain-English parts and every sentence was checked against the sources; unsupported sentences were removed. MITRE mapping is our own judgement.