4 ms·
I think the comments so far are too harsh. The purpose of this document is to lay out, in plan language, what should be the minimum requirements for a small bu
by enkid 4y ago
I think the comments so far are too harsh. The purpose of this document is to lay out, in plan language, what should be the minimum requirements for a small business in terms of cyber security. If there's no place to start, small business won't even be able to try. Following this document probably also will help with legal liability should the company have an incident. If you followed these steps, you're probably less likely to have liability then if you didn't.
- patrakov 4y agoEdit: this is applicable not to a "small business" in general, but a "small non-IT business". For a small IT business, well, this is only partially applicable - only to non-IT roles. If they are developing desktop software, then they need to be able to test its installation and upgrade via the installers, which is then incompatible with the "remove admin privileges from laptops" recommendation.
- Godel_unicode 4y agoOr they can run their installers tests in a VM which can be created without admin. And as a bonus the install experience will be more likely to be portable as opposed to silently depending on some forgotten config on the devs own machine.
- wallfacer120 4y agoMost people aren't capable of responding to anything the government does with anything but brain-dead snark. I've been feeling this problem has been getting worse on YC as of late.
- gjsman-1000 4y agoI think this is inevitable as people increasingly view the government as full of brain-dead politicians who don't know what they are doing. ;) Also, to be fair, we have some people in high authority who arguably are one step above brain dead...