Charities are targeted because they hold money and personal data and often have less protection than businesses. Most attacks are not sophisticated: a convincing e-mail asking the treasurer to change a supplier's bank details, a password reused from a breached website, an old laptop with no updates.
The basics that stop most attacks
- Use a different, strong password for every account, kept in a password manager.
- Turn on two-factor authentication, particularly for e-mail, banking and cloud storage.
- Keep devices and software updated, and use the built-in antivirus.
- Back up your data somewhere separate, and check that the backup can be restored.
- Agree that any request to change bank details is confirmed by phone on a known number.
- Know who to tell, and what to do, if something goes wrong.
The National Cyber Security Centre publishes a free small charity guide, and Cyber Essentials certification is a recognised standard that some funders now ask for. FVA can help you work through the basics.
Get in touch
Governance, funding, policies, legal structures and anything else about starting or running an organisation.
E-mail [email protected]
Telephone 0800 389 6046
