01294nas a2200229   4500008004100000022001400041245007500055210006900130260004200199300001000241490000600251520063200257653001900889653001800908653002500926653002000951653000900971653001300980100001600993700001701009856003801026       2018                        eng d  a1927-032100aInformation Security Best Practices: First Steps for Startups and SMEs0 aInformation Security Best Practices First Steps for Startups and  aOttawabTalent First Networkc11/2018  a32-420 v83 aThis article identifies important first steps toward understanding and implementing information security. From the broad selection of existing best practices, we introduce a lightweight yet comprehensive security framework with four useful first steps: identifying assets and risks; protecting accounts, systems, clouds, and data; implementing a continuity plan; and monitoring and reviewing. This article is intended primarily for startups and less mature companies, but it is likely to be of interest to any reader seeking an introduction to basic information security concepts and principles as well as their implementation.10abest practices10acybersecurity10ainformation security10arisk management10aSMEs10astartups1 aKaila, Urpo1 aNyman, Linus  uhttps://timreview.ca/article/1198