Welcome to CyberHygiene, my weekly newsletter, where I share tips and actionable data to help everyone stay safe online.
Cybersecurity is a critical issue for non-profit organizations of all sizes and types. As the world becomes increasingly digital and interconnected, nonprofits are increasingly at risk of cyber attacks, data breaches, and other cyber security threats. These threats can have significant and far-reaching consequences, including financial losses, reputational damage, and loss of trust from donors and other stakeholders.
There are several reasons why nonprofits are particularly vulnerable to cybersecurity threats. One is that they often have limited resources, which can make it difficult to invest in robust cybersecurity measures. In addition, nonprofits often rely on a large number of volunteers and staff members who may not be adequately trained on cybersecurity best practices. Furthermore, nonprofits often handle sensitive information, such as personal and financial data, which can be highly valuable to cybercriminals.
What are the most common types of cyber threats facing non-profit organizations
How can non-profit organizations protect themselves from cyber attacks?
How can cyber liability insurance help protect nonprofits?
How can donors vet a charity online?
What resources are available to help protect against cybersecurity threats in the nonprofit sector?
1. What are the most common types of cyber threats facing non-profit organizations?
Phishing scams, in which hackers use fake emails or websites to trick employees into giving away sensitive information
Ransomware attacks, in which hackers lock an organization’s data and demand payment to restore access
Social engineering attacks, in which hackers use tactics such as pretexting or baiting to obtain sensitive information
Malware, including viruses, worms, and Trojans that can steal or damage data
Distributed Denial of Service (DDoS) attacks, in which hackers attempt to make a website or online service unavailable to users.
3. How can cyber liability insurance help protect nonprofits?
Data breaches:
Insurance can cover the costs associated with responding to a data breach, such as notifying affected individuals, providing credit monitoring services, and paying for legal fees.
Business interruption:
Insurance can help cover the costs of lost income and expenses incurred as a result of a cyber attack that disrupts the organization’s operations.
Cyber extortion:
Insurance can help cover the costs of paying a ransom to hackers who have taken control of the organization’s data.
Reputational damage:
Insurance can help cover the costs of repairing damage to the organization’s reputation as a result of a cyber attack.
Legal fees:
Insurance can help cover legal fees and settlements if the organization is sued as a result of a cyber attack.
Crisis Management:
Some policies may include crisis management services which can help an organization navigate the process of responding to a cyber-attack and mitigate the reputational damage.
It’s important to note that cyber liability insurance policies can vary widely and that it is essential for nonprofits to understand the specific coverage provided by their policy. It is always recommended to consult with an insurance broker or cybersecurity expert to ensure that the policy will meet the organization’s specific needs.
5. What resources are available to help protect against cybersecurity threats in the nonprofit sector?
Books
1) Cybersecurity for Small Businesses and Nonprofits - by Dr. Jane LeClair, Denise P., Carolyn Schrader
2) Speaking Their Language: The Non-Techie’s Guide to Managing IT & Cybersecurity for Your Organization - by Rob Protzman
3) Simple IT - by Owen Wollum
4) IT Disaster Recovery Planning For Dummies - by Peter H. Gregory
Courses
1) Cybersecurity Training for Nonprofits by Community IT innovators
2) PROTECTING NON-PROFITS by Mosse Institute
3) CYBERSECURITY ESSENTIALS FOR NONPROFITS by Techimpact
4) Understanding & Improving Cybersecurity for Nonprofits by Whole Whale
Documents
1) The Ultimate Guide To Cybersecurity For Nonprofits by Makaye
2) 2022 Nonprofit Cybersecurity Incident Report by Community IT
3) Cybersecurity in Small Businesses and Nonprofit Organizations by Today’sCPA
Podcasts
1) The Center for Internet Security, & the Role of Nonprofits by Modern CTO Podcast
2) Cybersecurity for Nonprofits: What You Need to Know to Protect Your Data by Key Wealth Matters podcast
Tools
1) AccountGuard for Nonprofits by Microsoft


