In this webinar, Felipe Mondragon from Tech Impact shared the basic understanding of how cyberattacks happen and how to prevent them. Small to medium-sized nonprofit organizations are specifically susceptible due to their lack of cybersecurity policies and staff training. The good news is that there are lots of things you can do to protect your organization, even if you’re not a security expert.

1. Nonprofit Cyber Risk
Management
Felipe Mondragon

2. WE’RE A NONPROFIT ON A
MISSION TO LEVERAGE
TECHNOLOGY TO ADVANCE
SOCIAL IMPACT.

3. We do this by delivering tech services, education, and
training that help nonprofits and communities thrive.
NONPROFIT
EDUCATION & TRAINING:
• Unbiased research
• Easy-to-understand
• One-to-many approach
NONPROFIT
TECH SERVICES:
• Impartial advice
• Well-aligned solutions
• Adopt technology that fulfills
missions
WORKFORCE
DEVELOPMENT:
• Hands-on experience
• Launching careers
• Improved quality of life

4. Felipe Mondragon
Information Security Engineer
Security professional with 25+ years of experience in information
security in the financial and energy industries.
My goal is to empower non-profit organizations with the tools to
maximize their value to the community.

5. • All attendee lines will remain muted.
• Please connect to audio by dialing in (toll) or by using your computer speakers (VoIP Toll Free).
• If you have dialed in by phone select Telephone and enter your audio PIN number in the audio panel.
• If you lose audio, please exit out of the presentation and reconnect.
• We are recording today’s presentation and you will be sent a link to the webinar recording.
• Please use the “Chat Tab” to ask us questions.
1. Why are nonprofits targeted?
2. Nonprofit threat landscape
3. Common attack methods
4. Best practices
5. Expert support
AGENDA

6. Nonprofits are increasingly targeted by cyber attacks due to several
key factors. They often handle sensitive donor information, including
personal and financial data, making them lucrative targets for identity
theft and financial fraud. Additionally, nonprofits may lack the robust
cybersecurity infrastructure and resources that larger corporations
possess, rendering them more vulnerable to sophisticated attacks.
• Sensitive data – PII, PHI, Credit cards
• Under funded IT / cybersecurity budgets
• Understaffed – who’s watching the screens?
• Untrained staff
• Unprepared for incidents
Why are nonprofits targeted?

7. Cyber Criminals
Financial gain through theft of
sensitive data such as donor
information and credit card
details
Hacktivists
Ideological reasons, such as
promoting a cause, exposing
perceived wrongdoings, or
retaliating against the
nonprofit's stance on issues.
Insiders
Personal gain, revenge, or
coercion by external actors to
exploit their access to the
nonprofit’s systems.
Threat Actors

8. Common Attack Methods
Data Breaches
• Nonprofits often handle sensitive information, such as client records, personal health information and donor
details. A breach could lead to reputational damage and legal repercussions.
Phishing Attacks
• Cybercriminals may impersonate trusted sources to trick employees into revealing private and confidential
information.
Ransomware
• Malicious software can encrypt critical files, resulting in the demand of a ransom for their release.
Insider Threats
• Employees or volunteers with access to sensitive information could misuse or leak it.

9. • Implement Strong Access Controls (MFA)
• Regularly Update and Patch Systems
• Develop a Cyber Security Policy
• Conduct Cybersecurity Training and Awareness Programs
• Develop and Regularly Test an Incident Response Plan
• Perform Regular Security Assessment
• Risk assessments
• Vulnerability assessments
Best Practices

10. A Managed Service Provider can significantly enhance a
nonprofit's ability to manage cyber risk by offering
specialized expertise:
• Centralized device management
• Comprehensive cyber security solutions
• Vulnerability assessments
• Policy development support
These services help nonprofits protect their sensitive data,
maintain operational integrity, and focus on their mission
with greater confidence in their cybersecurity defenses.
Expert Support

11. LET’S ANSWER SOME
QUESTIONS!

12. TECHIMPACT.ORG