User Access & Login Safety

Do all staff and volunteers have their own individual login to access the network?(Required)
Do people require more than just a password to login (such as a code sent to their phone)?(Required)
Do people only have access to the information they actually need to do their job?(Required)
Are background checks performed for staff or volunteers in sensitive roles?(Required)
Are personal devices allowed to connect to the network or access organizational data such as files or email?(Required)

Protection from Viruses, Attacks and Data Loss

Do all computers use virus and malware protection?(Required)
Do computers and software receive regular updates?(Required)
Is important data backed up at least once per week?(Required)
If a computer was lost, stolen, or damaged, could the data be restored from a backup(Required)

Staff Awareness Training

Do staff and volunteers receive cybersecurity training at least once per year?(Required)
Does the training teach people how to spot suspicious emails?(Required)
Does the training teach people how to protect passwords?(Required)

Handling Personal & Sensitive Information

Has your organization identified what personal information it collects?(Required)
Is personal data kept private?(Required)
Is personal data only seen by people who truly need access?(Required)

Cyber Risk & Incident Readiness (What if Something Goes Wrong?)

Has your organization completed a cyber risk assessment in the last few years?(Required)
Have steps been taken to identify your organization's biggest cyber risks?(Required)
Do you have cyber insurance beyond basic business insurance?(Required)
Are your systems monitored for suspicious activity?(Required)
Do you have a written plan for what to do if your organization gets hacked?(Required)
Do you have a written plan for what to do if systems are locked because of ransomware?(Required)
If your organization did suffer a cyber incident do you know how to communicate with staff, donors, and the public?(Required)
If your organization did suffer a cyber incident do you know who to contact?(Required)

If Your IT is Outsourced

Do you outsource your IT services and support?(Required)
Do they follow your security and privacy rules?(Required)

Related Document Uploads

Please upload any security and privacy related policies and procedures you have in place for review.
Drop files here or
Max. file size: 256 MB.
    Please click submit and continue to book a session for your cybersecurity review.