Yet another Hacker News

Self-Employed? Solopreneur? NIST Has a Cybersecurity Guide Just for You

32 points tomrod 4 hours ago 8 comments

xvxvx 1 hour ago | parent

‘a lay-language resource‘.

IMO this misses the mark. Yes, it’s a decent attempt at simplifying cybersecurity, but if this is aimed at entry-level, non-technical people, it’s not gonna work.

One of my earliest jobs was to redesign training materials for one of the worlds largest companies. I stripped the training to its core, the true basics, and started there. The results were remarkable. I feel the urge to do the same with this document…

jaggederest 56 minutes ago | parent

I'd be interested in a small sample of what you're talking about. I suspect that's a marketable product these days even if all you do is deslopify generated documentation.

philosopherNoob 9 minutes ago | parent

I’m seconding the request. Anything specific that you (xvxvx) would explain to a layman differently? Even the briefest of examples would be a nice thought to chew on. “A should be B because C.”

I do a lot of explaining to non-techy people. My approach would be to print out the document and walk through it with them. Have the goal first be understanding of why certain things are a priority. Like it’s a baseball game: the three outfielders and three infielders are important to covering all your bases. We’re talking about this angle, in this context, and once the “why” is understood it’ll help them interpret the document correctly.

dkobia 31 minutes ago | parent

Instead of a guide. Why not a prompt?

312c 30 minutes ago | parent

Guide loses all credibility when it uses "Super Intelligence"

philosopherNoob 17 minutes ago | parent

This is my first time seeing “SI” in the wild. That is such a wrong term. It’s jargon in a place where it doesn’t belong.

It’s a darn fancy algorithm and a cool tool. Putting it on a pedestal instead of grounding it to reality is not going to help anyone. My condolences to the authors.

alhirzel 14 minutes ago | parent

I wonder how this relates to the ongoing ambiguity with CMMC 2.0 rollout.

tkdb 6 minutes ago | parent

I'm not a security expert.

Requests for comments from career security experts: is this any good?