This is something that SwiftOnSecurity used to do really well. They didn't try and encourage best practice, just easy things that you could do that were better, presented in a simple and fun style.

It's not perfect, but the UK NCSC has a load of guidance for individuals and small businesses that's a hell of a lot more approachable than the NIST document:

https://www.ncsc.gov.uk/section/advice-guidance/self-employe...