Self-Employed? Solopreneur? NIST Has a Cybersecurity Guide Just for You (nist.gov)

62 points by tomrod 6 hours ago

21 comments:

by xvxvx 3 hours ago

‘a lay-language resource‘.

IMO this misses the mark. Yes, it’s a decent attempt at simplifying cybersecurity, but if this is aimed at entry-level, non-technical people, it’s not gonna work.

One of my earliest jobs was to redesign training materials for one of the worlds largest companies. I stripped the training to its core, the true basics, and started there. The results were remarkable. I feel the urge to do the same with this document…

by mcmcmc 2 hours ago

Have to agree with you. You can’t introduce concepts like phishing and MFA without actually explaining what they are.

by jaggederest 3 hours ago

I'd be interested in a small sample of what you're talking about. I suspect that's a marketable product these days even if all you do is deslopify generated documentation.

by philosopherNoob 2 hours ago

I’m seconding the request. Anything specific that you (xvxvx) would explain to a layman differently? Even the briefest of examples would be a nice thought to chew on. “A should be B because C.”

I do a lot of explaining to non-techy people. My approach would be to print out the document and walk through it with them. Have the goal first be understanding of why certain things are a priority. Like it’s a baseball game: the three outfielders and three infielders are important to covering all your bases. We’re talking about this angle, in this context, and once the “why” is understood it’ll help them interpret the document correctly.

by 0x4e 27 minutes ago

As the target audience for this white paper, I’d appreciate HN’s take on the accuracy of this. Whether it misses something, deserves praise or any resources you can point out to make this advice even more actionable.

What’s your advice to a non-technical / non-tech savvy small business owner? Say, for example, people used to buy anti virus as a solution. What could they do now that resembles that?

—-

I work with lots of non-technical / non-tech savvy small business owners and many of them are showing concern. So, I’d love to share as much as possible with the people who are not Palo Alto networks clients.

by philosopherNoob 2 hours ago

This is my first time seeing “SI” in the wild. That is such a wrong term. It’s jargon in a place where it doesn’t belong.

It’s a darn fancy algorithm and a cool tool. Putting it on a pedestal instead of grounding it to reality is not going to help anyone. My condolences to the authors.

by tomrod an hour ago

Yeah, I dislike it too. As do most of the agencies forced to swap over to it I reckon, since "SI" is a vanity project and "AI" is what the rest of the world understands it to be.

by cowlevel an hour ago

"SI" is a shibboleth. It's designed for the present government to know who's loyal to them.

by tomrod an hour ago

Its worse than that though, as it isn't a loyalty test -- US federal executive agencies have to adopt it whether they like it or not.

by avaer 2 minutes ago

It's even worse than that; the president has declared anyone using the term "AI" is the Enemy, and aiding the Enemy is a capital crime.

I don't think this will actually be acted upon but the political/legal situation is quite rough.

by tkdb 2 hours ago

I'm not a security expert.

Requests for comments from career security experts: is this any good?

by alhirzel 2 hours ago

I wonder how this relates to the ongoing ambiguity with CMMC 2.0 rollout.

by whalesalad 35 minutes ago
by dkobia 2 hours ago

Instead of a guide. Why not a prompt?

by 2 hours ago
[deleted]
by mxuribe an hour ago

I didn't review it, but i for one appreciate that at least there is an attempt to help small business owners in this area.

by lunargamma676 2 hours ago

[dead]

by 312c 2 hours ago

Guide loses all credibility when it uses "Super Intelligence"

by esseph an hour ago

Maybe, but they would not be legally allowed to release the guide without using that term.

by mxuribe an hour ago

No, no, you're missing the point! Today its only "super" intelligence, then soon enough as it improves it will go to ludicrous intelligence, at which point its intelligence will have reached plaid!

by conorcleary 33 minutes ago

shh wait for the minaj release

Data from: Hacker News, provided by Hacker News (unofficial) API