Nonprofit

Map donor, volunteer, employee, and beneficiary information across fundraising systems, case-management platforms, shared drives, and email. Some records can reveal health needs, financial hardship, location, or vulnerability. Collect only what serves a defined purpose and restrict access to people with current responsibilities.

Cerberus can support approved information-protection workflows, and Spark can assist with privacy review. Avoid treating all constituent information as ordinary marketing data. Determine retention and deletion practices with program leaders, and consider the consequences to individuals before sharing information with partners or introducing new tools.

• Separate sensitive beneficiary records from fundraising access.
• Remove access promptly when volunteers and temporary staff leave.

Impersonation may involve an executive, faith leader, major donor, supplier, or trusted community partner. Establish independent checks for bank-detail changes, unusual grants, urgent transfers, and requests for gift cards or financial assistance. Make the process clear enough for volunteers to follow.

Plutus and Psycher can support review workflows, but authorized people must verify and approve consequential payments. Review access to online giving platforms, payment processors, and website administration before major fundraising periods. Assign ownership so an integration is not left unmanaged after the employee who introduced it departs.

• Use trusted callback details for payment changes.
• Restrict administrative access to donation pages and payout settings.

Identify the services that must continue during loss of email, case management, fundraising, or a critical provider. Prepare practical alternatives that protect beneficiary confidentiality. A continuity plan should explain who makes decisions and how staff communicate when normal tools are unavailable.

Dewey can support response coordination and Growler can assist with evidence records. Leadership must approve consequential containment, notifications, and external statements. Test restoration of essential records, not merely the existence of backups, and use the exercise to assign manageable improvements with named owners.

• Protect recovery copies from everyday administrative accounts.
• Include program leadership and safeguarding responsibilities in incident exercises.