Re:Cyber Guidance for Small Businesses
by enkid on Saturday November 26, 2022 @03:42PM
(#33756519)
I think the comments so far are too harsh. The purpose of this document is to lay out, in plan language, what should be the minimum requirements for a small business in terms of cyber security. If there's no place to start, small business won't even be able to try. Following this document probably also will help with legal liability should the company have an incident. If you followed these steps, you're probably less likely to have liability then if you didn't.
[ Parent
| on HN ]
Re:Cyber Guidance for Small Businesses
by wallfacer120 on Saturday November 26, 2022 @04:33PM
(#33756985)
Most people aren't capable of responding to anything the government does with anything but brain-dead snark. I've been feeling this problem has been getting worse on YC as of late.
Re:Cyber Guidance for Small Businesses
by gjsman-1000 on Saturday November 26, 2022 @05:20PM
(#33757417)
I think this is inevitable as people increasingly view the government as full of brain-dead politicians who don't know what they are doing. ;)
Also, to be fair, we have some people in high authority who arguably are one step above brain dead...
Re:Cyber Guidance for Small Businesses
by patrakov on Saturday November 26, 2022 @04:03PM
(#33756696)
Edit: this is applicable not to a "small business" in general, but a "small non-IT business". For a small IT business, well, this is only partially applicable - only to non-IT roles. If they are developing desktop software, then they need to be able to test its installation and upgrade via the installers, which is then incompatible with the "remove admin privileges from laptops" recommendation.
Re:Cyber Guidance for Small Businesses
by Godel_unicode on Saturday November 26, 2022 @04:46PM
(#33757113)
Or they can run their installers tests in a VM which can be created without admin. And as a bonus the install experience will be more likely to be portable as opposed to silently depending on some forgotten config on the devs own machine.