The National Institute of Standards and Technology published a new guide on November 2, 2026, specifically for U.S. small businesses without paid employees. The document adapts the NIST Cybersecurity Framework 2.0 for owner-operated firms, which represent 82.3% of all small businesses according to 2022 Census data. Recommendations include using phishing-resistant multifactor authentication, maintaining strong passphrases of at least 15 characters, and organizing actions under six core functions. The guide serves as a starting point for firms with limited technical expertise or resources, replacing an older 2009 publication.
Read the full story at econotimes.com.
Photo: Lenharth Systems (CC0) via Openverse
