In 2014 NIST introduced the National Cybersecurity Framework (CSF). It is designed for all businesses, large and small, to know things they should be doing to protect their businesses, data, customers, and more. Just how does it compare to HIPAA?
NotesDHS Getting Started for Small and Midsize Businesses (SMB)
US Chamber of Commerce: Internet Security Essentials for Business 2.0
C3 Voluntary Program: Begin the Conversation: Understand the Threat Environment
NotesIt's not just HIPAA. All the different guides spell out the same basic concepts.
For example: