Michael Enos shares some tips for CyberSecurity Awareness month so that nonprofits can stay safe online.

1. Its Easy to Stay Safe Online
Michael Enos
Sr Director Community & Platform

2. 2 © TechSoup Global. All Rights Reserved.
Michael Enos
Senior Director of
Community and Platform
• Michael Enos is Senior Director of Community
and Platform for Techsoup Global. In his role,
Michael directs dev-ops, enterprise
infrastructure, information and technology
security, and software development teams
that build and support platform products and
services.

3. Today’s Topics
• Overview of Cyber Security Frameworks
• Multi-Factor Authentication.
• Privileged Access Management and Password
• Password Management.
• The importance of keeping systems up to date
• Security Awareness Training

4. 4 © TechSoup Global. All Rights Reserved.
Phishing
Data Breach
Service
Disruption
Malware Ransomware
Cyber Threats NGOs Face
NGOs have specific types of data that if compromised, could impede our mission and lose the trust of the communities we serve
• Vulnerable Population’s Personal Information
• Donor Data
• Financial Information

5. NIST
Cybersecurity Framework
• What is the Framework?
• The Framework is voluntary guidance, based on
existing standards, guidelines, and practices for
organizations to better manage and reduce
cybersecurity risk. In addition to helping
organizations manage and reduce risks, it was
designed to foster risk and cybersecurity
management communications amongst both
internal and external organizational stakeholders.

6. Cyber Security
Framework version 1.1
Breakdown

7. 7 © TechSoup Global. All Rights Reserved.
Multi-Factor Authentication
• One of the quickest and easiest ways to stay safe online: enable multi-factor authentication
on your accounts. This simple step takes just a few minutes per account, and you only have
to do it once. As soon as it's in place, it becomes twice as tough for hackers to gain access
to your accounts.
• What is multi-factor authentication (MFA)? Also known as two-factor authentication, this
widely available tool secures your accounts by requiring two pieces of information to log in.
One common example of two-factor authentication: entering your password and then typing
in a one-time code sent to your email address or smartphone.
• Other examples of a second step that may be used in two-factor authentication or 2FA
include:
• A security question (for example, "What was the name of your favorite teacher?")
• A biometric identifier such as your face or fingerprint.
• A temporary passcode you get via an authenticator application.
• You can typically enable multi-factor authentication by going to an account, going to settings
and looking under security. You then toggle multi-factor authentication to "on" and provide
any necessary information, such as your phone number or email address where you want a
code sent. For example, here's how to turn on 2FA on Facebook and on Google.

8. 8 © TechSoup Global. All Rights Reserved.
Password Management
• Another top priority for online safety: Use strong passwords and a password
manager. If you can easily remember a password, chances are good that a
hacker could use a computer program to quickly guess it and get the keys
to your online kingdom.
• A strong password should be:
• Complex – with upper and lowercase letters, numbers, and symbols
• Long – at least 16 characters long to make it much harder to crack
• Hard to guess – no real words or personal details like names and birthdays
• But the same characteristics that make passwords hard to crack also make
them difficult to remember. That's why password managers are such a
handy tool.
• Password managers keep track of all your passwords in a secure online
vault, can generate strong passwords for you on demand, and can even
safeguard other important information such as your credit card numbers.
They can quickly and easily auto-fill your passwords for you when you go to
log into a site.
• Examples of popular password managers include Norton Password
Manager. You can get a free or paid password manager service depending
on your needs, number of devices you have, and the features you need.
.

9. 9 © TechSoup Global. All Rights Reserved.
Password Management
• Another top priority for online safety: Use strong passwords and a password
manager. If you can easily remember a password, chances are good that a
hacker could use a computer program to quickly guess it and get the keys
to your online kingdom.
• A strong password should be:
• Complex – with upper and lowercase letters, numbers, and symbols
• Long – at least 16 characters long to make it much harder to crack
• Hard to guess – no real words or personal details like names and birthdays
• But the same characteristics that make passwords hard to crack also make
them difficult to remember. That's why password managers are such a
handy tool.
• Password managers keep track of all your passwords in a secure online
vault, can generate strong passwords for you on demand, and can even
safeguard other important information such as your credit card numbers.
They can quickly and easily auto-fill your passwords for you when you go to
log into a site.
• Examples of popular password managers include Norton Password
Manager. You can get a free or paid password manager service depending
on your needs, number of devices you have, and the features you need.
.

10. 10 © TechSoup Global. All Rights Reserved.
Keeping Software Up To Date
• Keeping your software up to date is one the easiest and most important
things you can do to stay safe online. That's because software updates
often fix bugs or loopholes attackers can exploit to gain access to your data,
infect your device with malware or ransomware, and even remotely take over
your computer.
• Make sure to update your software on a regular schedule or whenever you
get an alert letting you know an update is available. Get in the habit of doing
software updates right away rather than putting them off for later. It's also
smart to get a reputable security program that can add an extra layer of
protection.
• Want to brush up on how to perform regular updates? Here's how to update
the software on an Android
and how to update the software on an iPhone or iPad. It's important to
regularly update your operating system as well as apps on your device. Not
only will regular updates help keep you safe online and shore up
your privacy, they'll also fix glitches and help your devices run more
smoothly.
• Quick "It's easy to stay safe online" task
• Take 15 minutes to check your devices for software updates and
get current. For convenience and speed, turn on automatic software
updates. If you prefer to update software manually, set up an alert to remind
you to check for updates once a month.
• .
.

11. 11 © TechSoup Global. All Rights Reserved.
Security Awareness Training
• Learning to recognize and report phishing scams is a top step you can take
to stay safe online. Fortunately, it's fairly easy to do and doesn't take long at
all.
• What is a phishing scam? It's when a cybercriminal sends you a fake email,
direct message, text, or even a pop-up ad to try to trick you into taking an
action such as clicking a link, providing personal information, or making
a payment. A phishing message may be cleverly disguised to look like a real
message from a familiar company such as your bank.
• Learning to spot the telltale signs of phishing and to stop and think before
taking action on an email or other message can go a long way towards
keeping you safe from phishing scams. Here are some clues that can tip
you off to a phishing attack:
• Alarming "news" about an account.
• Attachments that look odd.
• Failure to address you by name.
• Grammar errors or misspellings.
• Offers for free gadgets, trips, or other items of value.
• Language that sounds just a little bit "off."
• Request to click a link or take urgent action.
.

12. Thank You!
Michael Enos
menos@techsoup.org