Small Business Administration logo
Logo of U.S. Small Business Administration
/

SBA Issues Cybersecurity Guidelines for Non-Employer Firms

1 min read

The U.S. Small Business Administration, or SBA, Office of Advocacy has released a publication intended to help non-employer companies manage and reduce cybersecurity risks.

Helping Non-Employer Firms Navigate Cybersecurity Risks

The National Institute of Standards and Technology said Thursday the first public draft of the NIST Internal Report, titled Small Business Cybersecurity: Non-Employer Firms, focuses on guiding non-employer businesses with no paid employees to understand the basics of cybersecurity and enable them to navigate the NIST Cybersecurity Framework 2.0, a set of guidelines for handling and mitigating cyberthreats.

The publication provides cybersecurity risk management tips to these small businesses, enabling them to address cybersecurity risks despite their lack of technical knowledge or limited budget. It also provides recommendations to small businesses as they grow and bring in employees.

Small Businesses by the Numbers

The SBA Office of Advocacy noted that there are around 34.8 million small businesses in the country, which account for 99 percent of all U.S. businesses. Non-employer firms with no paid employees make up 81.7 percent of all small businesses. These businesses, which are run by the owners themselves, are present across all industries. Despite being small businesses, they play a significant part in the nation’s economy, innovation and industrial competitiveness.

Potomac Officers Club presents the 2025 Cyber Summit on May 15. Register and learn about emerging cyber threats, new cyber policies and initiatives and modernization strategies.

SBA Issues Cybersecurity Guidelines for Non-Employer Firms