NIST finder connects small businesses to 83 nonprofit cyber programs
The new finder aggregates self-submitted nonprofit programs but doesn't certify the help any listed program delivers.
TL;DR
NIST released a Small Business Cybersecurity Support Programs Finder, an interactive state map and table listing 83 nonprofit programs across all 50 states. The organizations offer local help such as risk assessments, penetration tests, compliance consulting, and incident response; schools and municipal governments can use the directory too. Inclusion is by self-submission, and NIST doesn't certify what any listed program delivers.
The National Institute of Standards and Technology's Small Business Cybersecurity Support Programs Finder is a directory, not a compliance program. Launched Oct. 5, it lists nonprofit organizations that work with local small businesses on cybersecurity risk management. The point is connection: an under-resourced shop that doesn't know where to start can find a nearby nonprofit that does.
Inside Cybersecurity reports the finder holds 83 organizations across all 50 states, with an interactive map plus an alphabetized table. NIST's Daniel Eliot told the outlet it helps move "NIST guidelines from paper to practice" and that schools and municipal governments can use it, too. Listed services include risk assessments, penetration tests, compliance consulting, and incident response. NIST is asking programs to self-submit for inclusion (nist.gov).
For a defense subcontractor facing SP 800-171 or CMMC, a mapped nonprofit could run a gap assessment or provide compliance consulting, but self-submitted entry means NIST isn't certifying what any listed program delivers. NIST is separately fielding ideas for a future small-business primer on SP 800-172. Elsewhere on the calendar: an Oct 29 webinar covers the new SP 800-171A primer, and a Nov 10 call walks through the finder.
Published ·Deep Fathom