The CRF Safeguards — Small Business Edition is a focused subset of the CRF Safeguards Core Edition, scaled for smaller organizations that need a practical, achievable cybersecurity safeguard library without the full scope of an enterprise program. It does not introduce new or separate safeguards — it presents a curated view of the Core Edition that emphasizes consistent execution of a core set of controls rather than complex or resource-intensive solutions.
Safeguards in this edition are written to be specific and directive — concrete enough to guide implementation, assessment, and validation — while remaining accessible to organizations without dedicated security teams. The emphasis is on what matters most for protecting a small business from real-world cyber threats.
To see all the cybersecurity standards included in our database, visit the CRF Cybersecurity Standards Database.
This edition covers 17 safeguard domains across 6 categories:
Begin with a thorough assessment of your current cybersecurity posture, identify critical assets and potential vulnerabilities, and prioritize safeguards based on your specific risk profile.
Regularly, at least annually or whenever significant changes occur in your operational environment or the threat landscape.
Yes, many foundational and hygiene-level safeguards are cost-effective and scalable, making them accessible for organizations of all sizes.
Through continuous education, awareness programs, and clear policies that emphasize the importance of cybersecurity and outline individual responsibilities.
Experts can provide strategic guidance, help identify and prioritize safeguards, assist with implementation, and offer ongoing support to ensure your cybersecurity measures are effective and up-to-date.
Provide your email address below, and we’ll instantly send BOTH of the CRF Safeguards – Small Business Edition documents to your inbox.
