This is the overall SMB security verification plan using CSP resources. https://drive.google.com/drive/folders/1tQmBswjFoTJ9Upx1lc56BW1F4DgppFur  

• SMB quick start 
• https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.1300.pdf
• CIS Controls - CIS IG1 (“cyber essentials” - Great risk assessment tool)
• https://storage.pardot.com/799323/1694810927NC0iZQGR/CIS_Controls__Cost_of_Cyber_Defense__2023_08.pdf
• SBA Cybersecurity Portal:  
• https://www.sba.gov/business-guide/manage-your-business/strengthen-your-cybersecurity
• FCC Cybersecurity Planner for Small Business: 
• https://www.fcc.gov/cyberplanner
• Cyber Readiness Institute: 
• https://cyberreadinessinstitute.org/
• StaySafeOnline (free service - has a waitlist): 
• https://staysafeonline.org/cybersecure-business/
• CISA SMB Resources: 
• https://www.cisa.gov/cyber-essentials
• https://www.cisa.gov/sites/default/files/publications/Cyber%2520Essentials%2520Starter%2520Kit_03.12.2021_508_0.pdf
• NCSC Small Business Guide: 
• https://www.ncsc.gov.uk/collection/small-business-guide
• HIPAA RA tool (free – 156 targeted questions): 
• https://www.healthit.gov/providers-professionals/security-risk-assessment-tool
• US- Cyber Resilience Review (CRR) (self assessment): 
• https://www.cisa.gov/resources-tools/resources/cyber-resilience-review-downloadable-resources
• Microsoft Security Program for Nonprofits (free risk assessment):
• https://www.microsoft.com/en-us/nonprofits/data-security
• Cyber Insurance Buyer’s Guide and industry-specific recommendations: 
• https://info.coalitioninc.com/rs/566-KWJ-784/images/Coalition_CyberInsuranceBuyersGuide.pdf
• Key Cybersecurity Best Practices: 
• https://www.chnvciso.com/resources

Microsoft 365 (Windows/Defender)

• Microsoft Defender for Endpoint: https://www.microsoft.com/en-us/security/business/threat-protection/endpoint-defender
• Data Loss Prevention (DLP): https://learn.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies
• Multi-Factor Authentication (MFA): https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Google Workspace

• Advanced Protection Program: https://landing.google.com/advancedprotection/
• Security Center: https://workspace.google.com/security/
• Data Loss Prevention (DLP): https://support.google.com/a/answer/9057311?hl=en

Amazon Web Services (AWS)

• Identity and Access Management (IAM): https://aws.amazon.com/iam/
• Amazon GuardDuty: https://aws.amazon.com/guardduty/
• AWS Key Management Service (KMS): https://aws.amazon.com/kms/

Microsoft Azure

• Azure Active Directory (Azure AD): https://azure.microsoft.com/en-us/services/active-directory/
• Microsoft Defender for Cloud: https://azure.microsoft.com/en-us/services/defender-for-cloud/
• Azure Key Vault: https://azure.microsoft.com/en-us/services/key-vault/

Google Cloud Platform (GCP)

• Google Cloud Identity and Access Management (IAM): https://cloud.google.com/iam
• Security Command Center: https://cloud.google.com/security-command-center
• Cloud Key Management Service (Cloud KMS): https://cloud.google.com/kms