Recommended
More Related Content
What's hot
What's hot (19)
Viewers also liked
Viewers also liked (20)
Similar to IT Security for Nonprofits 101
Similar to IT Security for Nonprofits 101 (20)
Recently uploaded
Recently uploaded (20)
IT Security for Nonprofits 101
- 1. An Introduction IT Security for Nonprofits 101
- 2. 1. Introductions 2. The Security Landscape 3. 7 Easy Steps to Be More Secure Overview of Session 4. Resource Sharing 5. Q/A Questions Sprinkled Throughout
- 3. 1. Name 2. Organization 3. Mission 4. Approx. Number of Staff 5. Why are you here? Introductions • Get some idea of what security is about • It’s something I need to know about • Other reason?
- 4. User Oriented Levels of Security Web Cloud Network (WAN) Network (LAN) Workstation + Mobile
- 5. Security is all about Balance The Iron Triangle • Cost • Time • Quality Balancing Needs Main Factors for Most Groups • Limited Budget + Lack of Awareness • Forget to sharpen the saw • No good sources for information
- 6. Question What has your experience been with balancing needs?
- 7. Seven Steps to a More Secure Organization 1. Keep All Software Updated 2. Get Enterprise Antivirus 3. Cultivate Aware Users 4. Balance Privacy, Security, and Productivity 5. Know Your Compliance Needs 6. Establish a Strong Password Policy Overview 7. Stay Informed
- 8. 1. Keep Software Updated Workstation Software Updates • OS (Windows, Mac OS X) • Microsoft Office • Adobe (Acrobat, Flash, Air) • Browsers (Chrome, Firefox, IE) • Email Client (Outlook, Thunderbird) • Anti-Virus/Anti-Malware/Anti-Spyware • iTunes and Device Firmware • Remote Access/VPN
- 9. 1. Keep Software Updated Server Software Updates • BIOS • Device Drivers (Especially RAID) • Windows Server • Exchange Server (Email) • SQL Server (Database) • Endpoint Protection (such as Symantec) • Backup Software (such as BackupExec) • Proprietary Systems
- 10. Question How does your team handle updates?
- 11. 2. Get Enterprise Antivirus Techsoup – Symantec Endpoint Protection • $5/system • Server-based Management Option • Integrates with BackupExec • Anti-virus • Anti-malware • Anti-spyware • Firewall (Software) • Protect ALL Systems (Incl. Volunteer, etc)
- 12. Question What is your anti-virus experience? Product story?
- 13. 3. Cultivate Aware Users Everyone is responsible for security! • Know your software • Read prompts, don’t just click Ok • Installation Approval Process • Dangers of USB Drives, Mobiles, iPods, etc • Explain why, not just how and what • Recruit your tech savvy users to help • Encourage them to speak up!
- 14. Question How does your organization cultivate an aware team?
- 15. 4. Privacy, Security, Productivity Balance is the key to Security • Be Real - If it ain’t used, it don’t work! • Be Honest – Tell users what to expect • Privacy – Tell users what you monitor • Balance Risk Prevention vs Recovery • Address Complaints with solutions
- 16. Question What are your privacy concerns (org and individual)?
- 17. Know Your Compliance Needs • PCI (Payment Processing) • HIPAA (Medical Information) • SAS70 • SSAE16 5. Compliance • Funder/Grant Requirements
- 18. Secure Passwords: • At least 8 characters 6. Strong Password Policy • At least one each of: • Uppercase Letter • Lowercase Letter • Number • Symbol (!@#$%^&*()) Example: P@ssw0rdsSuck!
- 19. Use a password database for ease • KeePass (Free and Open Source) 6. Strong Password Policy • SplashID (Syncs between devices) Use browsers to store passwords • Set master password • Only on your system (which is password protected) Protect your systems and devices
- 20. Question What tips can you share for password success?
- 21. Top Resources for Security Information • NTEN • US CERT • Symantec 7. Stay Informed • Techrepublic • Techsoup Security Forum* • http://501cybersecurity.com/* • EDUCAUSE* * Thanks to Robert Weiner for these resources
- 22. Question What resources do you recommend?
- 23. Questions, Answers, Discussion Questions?