More than half a million Small to Medium Businesses (SMBs) will shut down in 2017 because of cyber security breaches according to a report from ‘The Business Journals’. Forty-three percent of all cyberattacks target SMBs. The average recovery cost is $36,000. Sixty percent of SMBs hit by a cyberattack close their doors within six months of the breach. This toolkit will help you circumvent these sobering statistics.

The Washington Small Business Development Center Cybersecurity Toolkit is to be used in conjunction with the Small Business Cybersecurity Workbook. The workbook is available here:

Sm Bus Cybersecurity Workbook.pdf

Use this template to customize your own Written Information Security Plan (WISP):

WISP.doc* or WISP.pdf

*Documents are located at wsbdc.org-wp-content/uploads.. If you prefer an emailed document contact info@wsbdc.org

Advanced Workbooks

• FCC Cybersecurity Planning Guide.pdf is a 51 page Federal Communications Commission Small Biz Cyber Planner tool
• NIST Small Business Information Security – The Fundamentals.pdf

Federal Standards

• NIST.SP.800-171.pdf Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations

Reporting Requirements Federal Regulations

There are state and federal reporting regulations in the event of a data breach due to a cyber attack.

• • After-a-cyber-breach-what-laws-are-in-play.pdf The Cybersecurity Law Report by cslawreport.com
  • Data breach charts 2016-07-01.pdf BakerHostetler charts give state by state definitions and requirements

DavisWright Tremaine, LLP Data Breach Notification Summary for

Washington

Oregon

Idaho

Montana

Cybersecurity Resources

• Guide for Small Business.pdf Common Sense Guide to Cyber Security for Small Businesses – Recommended Actions for Information Security 1st Edition – March 2004
• Small Merchant Guide to Safe Payments.pdf Guide to Safe Payments pci Security Standards Council July 2016
• Small Merchant Questions to Ask Your Vendors.pdf Questions to Ask Your Vendors guide 2016 by pci Security Standards Council
• Ransomware-Public-Handout.pdf Ransomware flyer from the U.S. Department of Justice, FBI
• Washington SBDC Cyber Security – Information Security Business Resource page
• Stop Think Connect.org https://stopthinkconnect.org/resources/preview/tip-sheet-basic-tips-and-advice

Handouts:

Cyber-Awareness-Canvas – a one page planning guide.pdf

10 Cyber Tips for Businesses.pdf published by the FCC – http://www.fcc.gov/cyberforsmallbiz and http://www.fcc.gov/cyberplanner

FCC Smartphone Tip Sheet.pdf