Top 12 Security Considerations for Your Volunteer Board
As a volunteer board director, you’re highly dedicated and invested in your cause. In a perfect world, all the money you raise would go toward your programs and activities. The reality is that some percentage of your money has to go toward running your nonprofit or charity and that includes addressing security considerations.
Hopefully, your organization won’t ever become the target of cybercrime, but you can’t lead your organization on hope alone. A security problem could result in financial loss or data losses. It can harm your nonprofit’s reputation or even cause it to shut down completely.
If you think that hackers won’t bother with your organization, because you have nothing to take, think again. Cybercriminals are aware that you may not have the funds to take the right security protections and that leaves you vulnerable to an attack.
Assessing security risks is just as important as assessing financial risks or choosing the right executive director. The cyber-threat landscape continues to evolve. By putting the following 12 security considerations on your nonprofit board’s next agenda, you can start talking about what you can do to address them.
The Top 12 Security Considerations for Your Nonprofit Board
Putting the topic of security on your board agenda is a good start. The following 12 security considerations will give you some specific talking points.
1. Establish Basic Principles to Monitor and Manage Cybersecurity Risks
Learn what data you’re collecting and where your data is stored. Who has access to it now and do they need to have access to it? What changes do you need to make to ensure it doesn’t get into the wrong hands?
2. Identify the Potential Security Risks and Their Drivers
Your usernames and passwords should be secure and not easily guessed. Nonprofits are vulnerable to phishing and hacking attacks. Criminals are counting on the fact that you’re not well-organized or on top of security protocols. Ransomware can lock up your system until you pay the hacker a sum of money from your hard-earned funds.
3. Establish a Risk Management Plan for Cybersecurity Risks
It may help to enlist the help of an IT professional to help you develop a realistic risk management plan that’s also affordable. Determine what your board will do to avoid, accept, mitigate, or transfer various risks.
4. Identify Third-party Vendors that May Have Access to Your Systems
If a criminal hacked into their system, yours could also be at risk. Review contracts and agreements to see what protections your nonprofit may have in the event of a data breach.
5. Assess Cybersecurity Risks Everywhere
Don’t just consider the risks of cloud data but also what people are accessing on desktops, laptops, and mobile devices. Implement solutions that allow board directors to access board materials without putting your nonprofit at risk. The right board management system solves many of your security problems.
6. Identify Risks Most Critical for Your Nonprofit
It may be helpful to take some cues from other nonprofits. However, bear in mind that every nonprofit is unique, so there’s no one-size-fits-all solution, and the latest anti-virus software probably isn’t adequate enough on its own.
7. Understand Legal Impact
Understand the legal impact that cyber risks pose to your nonprofit if you can’t get your board to agree on security considerations. It may be worthwhile to invite an attorney that specializes in cybersecurity matter to your board to give a presentation.
8. Document Protocols in Writing
They’ll serve as a valuable resource if there’s ever a cybersecurity breach. It helps to do a dry run or participate in tabletop exercises to practice your response in preparation for a real attack.
9. Make sure I.T. is kept up-to-date
Make sure your operating system is updated and that all patches are secure. Run all updates as soon as possible to keep your systems protected.
10. Implement Continuous Training
Train the board, staff, and volunteers in cybersecurity measures. Educate everyone about the red flags and warning signs that could allow a hacker or malware to infect your system. Emphasis the harm it could to do the organization if sensitive information gets into the wrong hands. This is all part of making sure your board and key staff are cyber-ready.
11. Bolster Your Systems
Consider bolstering your systems with security software including firewalls, VPN, and antivirus software to ward off potential hackers. Use multi-factor authentication as an extra layer of security. An IT professional will be able to tell you if you have the proper precautions in place or what you need to do to protect your data further. This is money well-spent for nonprofits. If you can’t afford to hire a tech person, you may have some talent within your volunteer base that you can tap into.
12. Have a Backup System in Place
It’s vital for nonprofit organizations to have multiple sources of crucial data and system redundancies on-site and in the cloud, in the event that one system or another gets compromised. Even if your nonprofit falls victim to an attack, you’ll have the benefit of knowing that you can still access your data. This is an easy thing you can do to prevent the damage that cyberattacks pose. It will prevent vast panic in the event of a breach. Moreover, you’ll score points with your supporters when you showed that you were prepared.
How Board Management Software Can Help
BoardEffect prevents many of your worries over security considerations. Imagine being able to collaborate and share information within the security of a strong board system that has built-in state-of-the-art security. BoardEffect gives you the ability to set granular permissions and that gives your board administrator full control over who can access your system.
BoardEffect gives you unlimited secure cloud storage for sensitive data and all your important documents. Also, BoardEffect’s security protocols meet the NIST Cybersecurity Standard framework, which is trusted by financial institutions and other industries that require strict data protection.
Your mission is critical, and your nonprofit serves some of the most vulnerable members of your community with services they can’t get from the government or anywhere else. Addressing security risks protects your organization from liability issues and bolsters your good name and reputation. Overall, taking security measures protects your donors, board, staff, members, and volunteers.
To learn more about how a BoardEffect board management system can serve your mission-driven organization and support your cybersecurity best practices, request a demo today.
