Home / Knowledge Center / Official guides
Official guides
Go straight to the source
The standards and agencies behind the rules your business has to follow, with a plain-English note on each. Every link opens the official site.
The guides
The standards and agencies behind the rules. These links open the official sites in a new tab.
NIST Cybersecurity Framework
NIST CSF 2.0 Small Business Quick-Start Guide
The government’s plain-language starting point for building a cybersecurity program, written for small and mid-sized businesses.
NIST Cybersecurity Framework
NIST Small Business Cybersecurity Corner
Free guides, videos, and planning tools from NIST aimed at small organizations.
NY SHIELD Act
NY Attorney General: SHIELD Act
What the SHIELD Act requires of businesses that hold New Yorkers’ personal data, and how breach reporting works.
HIPAA
HHS: HIPAA Security Rule Guidance
Official guidance, tools, and papers for protecting electronic patient information.
PCI DSS
PCI Security Standards Council: Resources for Small Merchants
Short, practical guides for businesses that take card payments, including the Guide to Safe Payments.
CMMC / NIST 800-171
DoD CIO: CMMC Program
The Department of Defense’s official CMMC program page, for contractors handling federal and controlled information.
General
CISA: Small and Medium Businesses
Free guidance and services from the nation’s cyber defense agency.
General
FTC: Cybersecurity for Small Business
Plain-English basics on phishing, ransomware, vendors, remote access, and cyber insurance.
PIPEDA (Canada)
Office of the Privacy Commissioner of Canada: Privacy Guide for Businesses
For North Country businesses that serve customers across the border.
AI in the workplace
NIST AI Risk Management Framework
NIST’s framework for using AI responsibly, plus its Generative AI Profile for ChatGPT-style tools.
AI in the workplace
CISA: Artificial Intelligence
Security guidance from CISA on deploying and using AI systems safely.
Links are provided for general information and are not legal advice. Northern Computers is not affiliated with these agencies.