Not-for-profits and community groups across the South West hold exactly what attackers want — personal details of members and clients, donor and payment information, grant funds — usually with no IT budget and volunteers wearing many hats. It’s a tough combination, and it shows: only around 23% of Australian NFPs have a documented cyber security plan. The good news is that the highest-impact steps cost little or nothing.
Start with the free, high-impact basics
- Multi-factor authentication on email, banking and your donor/member systems. Free, and it stops the most common break-ins.
- Unique passwords, ideally via a password manager, so one leak doesn’t open everything.
- Automatic updates on every device and app.
- Tested backups of your important data, so a mistake or ransomware doesn’t wipe you out.
Use the discounts you’re entitled to
Many NFPs overpay or go without because no one set up the nonprofit offers available to them:
- Microsoft and other vendors offer free or heavily discounted licensing for eligible charities — often including the security features you need.
- Sector support like Infoxchange’s Digital Transformation Hub provides free guides and training aimed squarely at NFPs.
- Keep an eye on government cyber funding directed at the sector, which has grown in recent years.
Protect against the scams aimed at you
NFPs are targets for invoice and payment-redirection scams and fake “urgent” requests to the treasurer. Agree a simple rule: any change to bank details or an unusual payment request is confirmed by phone, using a known number, before anyone acts.
Write a one-page plan
You don’t need a thick policy. A single page covering who to call, where backups are, how to report a problem, and the basics above puts you ahead of most of the sector — and it’s often what grant funders now ask about.
Get volunteers onside
Most incidents start with a person, not a computer. A short, friendly briefing for staff and volunteers on spotting scam emails is one of the cheapest, most effective things you can do.
If your South West not-for-profit wants to lift its security without blowing the budget, get in touch. We’ll help you set up the basics, claim the discounts you qualify for, and put a simple plan in place.