The Canadian government's Canadian Centre for Cyber Security
("CCCS") has released Baseline cybersecurity controls for small and
medium organizations in an effort to help small and
medium-sized businesses improve their cybersecurity practices and
their overall resiliency to cybersecurity threats.
Small and medium-sized businesses face a range of cyber threats
in the form of cybercrime, often with immediate financial or
privacy implications, such as compromised customer, financial and
proprietary information. With this in mind, the baseline controls
provide a condensed set of advice, guidance and security controls
on how such businesses can maximize the effectiveness of their
cybersecurity investments. In this bulletin, we review key features
of the guidance.