Small Business Security Resources

Our site has a wide variety of security information and best practices as well as links to many corporate security resources.
https://bluestone.bank/resources/

Provides security information and best practices for all levels of small business whether hosting a website, computing in the cloud, or just using email.
https://www.fcc.gov/general/cybersecurity-small-business

This site provides a variety of online courses to help you run and secure your business.

• Crime Prevention – A Guide for Small Business: This is a course directed to small business owners who are concerned about crimes within and around their businesses. This module will help you become aware of how crime can affect your firm and suggest ways to help prevent it.
https://www.sba.gov/counseling/manage-your-business/#strengthen-your-cybersecurity

• Cybersecurity for Small Businesses: A self-paced training exercise provides an introduction to securing information in a small business. Topics include: defining cybersecurity; explaining the importance of securing information through best cybersecurity practices; identifying types of information that should be secured; identifying the types of cyber threats; defining risk management; and listing best practices for guarding against cyber threats.
https://www.sba.gov/article/2016/apr/14/cybersecurity-small-business

Learn the basics for protecting your small business from cyber-attacks. The business cybersecurity resources in this section were developed in partnership with the National Institute of Standards and Technology, the U.S. Small Business Administration, and the Department of Homeland Security.
https://www.ftc.gov/business-guidance/small-businesses/cybersecurity

The mission of the Internet Crime Complaint Center is to provide the public with security incident awareness as well as a reliable and convenient reporting mechanism to submit information to the Federal Bureau of Investigation concerning suspected Internet-facilitated criminal activity.
https://www.ic3.gov/default.aspx

Information and best practices to help protect your business from Corporate Account Takeover. Includes current case studies of how corporate takeover is perpetrated.
https://www.nacha.org/content/account-takeover

Resources for risk mitigation of Corporate Account Takeover.
https://www.mass.gov/service-details/frequently-asked-questions-about-corporate-account-takeovers

Online brochure reviewing prevention and response to Ransomware attacks.
https://pdf.ic3.gov/Ransomware_Trifold_e-version.pdf

The Federal Trade Commission offers a variety of information about ransomware including a short video discussing what ransomware is, how it is perpetrated and how to prevent loss of assets to one of these attacks.
https://www.ftc.gov/news-events/audio-video/video/defend-against-ransomware

A tool for small businesses to create customer cybersecurity planning guides.
https://transition.fcc.gov/cyber/cyberplanner.pdf

This site provides disaster recovery guides walking you through the basic disaster recovery planning process. You will be asked to sign-up to download these guides.
https://www.agilityrecovery.com/business-continuity-guides

Resources for preventing and defending your business from social engineering attacks.
https://www.digitaldefense.com/blog/social-engineering-attacks-common-techniques-and-how-to-prevent-them/

Security awareness training for employees and phishing tests. There is a cost should you sign-up for this service.
https://www.knowbe4.com/

This site provides information about current threats and incidents along with security tips and updates. 
https://www.us-cert.gov/

In-depth security news and investigations presented by Brian Krebs, computer and internet security investigative guru. Sign up for alerts:
https://krebsonsecurity.com/

Newsletters, webcasts and advisories on Cybersecurity Threats.
https://www.cisecurity.org/ms-isac/