Cybersecurity for Not-for-profits

At PwC, we are committed to using our community of solvers to make a positive impact to challenges facing Australia today.

Our Cybersecurity & Digital Trust team have worked alongside Infoxchange and their Digital Transformation Hub to build skills, resources and knowledge across the NFP sector to enable organisations to manage information security and cyber risks.

There are a number of resources below to assist you on your digital and cybersecurity journey.

Download our Privacy Guidelines for Not-For-Profits (NFPs)

Download these privacy guidelines for detailed advice on how to protect your organisation's data.

Compliance with privacy legislation can be complex for many Not-for-profits who are often time poor. Our Cyber team developed an excellent resource to guide the development of policies and processes for your organisation. It provides detailed guidance about:

What is personal information?
Your organisation's legal obligations
An overview of Australian Privacy Principles (APPs)
The Notifiable Data Breaches Scheme
Examples of breaches of Australian not-for-profit organisations
Best practices to manage privacy
Having a data breach response plan.

When you're ready to commence formulating your organisation's privacy policy, download the Privacy Policy Template.

06/02/23

What will it take to create a cybersafe future for NFPs

A recording of this webinar delivered by our Cybersecurity & Digital Trust team can be accessed via this link

What will it take to create a cybersafe future for NFPs?

A recording of this webinar delivered by our Cybersecurity & Digital Trust team can be accessed via this link.

The role for NFPs in strengthening Australia's overall cyber ecosystem
Data and privacy considerations for NFPs given the range of personal information and confidential data they collect
Many NFPs are still targeted due to lack of basic hygiene and cyber skills - how to leverage free tools for quick wins
Strategic decision-making, and the place for collaboration.

Webinar: Think a cyber attack wouldn’t happen to you? Think again

A recording of this webinar delivered by our Cybersecurity & Digital Trust team can be accessed via this link.
Topics covered include:

Interactive virtual activity - Cyber threat detection
Changing business, technology and cyber threat landscape
Key threat scenarios for NFPs to consider
What can be done by NFPs to protect against these cyber attacks
Key takeaways and cyber resources at your disposal

Webinar: Cyber criminals are coming for you: are you prepared for the unexpected?

A recording of this webinar delivered by our Cybersecurity & Digital Trust team can be accessed via this link.
The webinar will include the following:

Brief introduction about the cyber security threat landscape
Common types of scams targeting businesses and individuals
Case studies and industry examples
Tips and tricks to protect you, your family and your organisation.

Download our End- User Security Policy Template

We recommend every Not-for-profit develop an end user security policy so staff understand their responsibilities and how to keep information safe. You can simply download the template here and adapt for your organisation.

The main benefits to having this policy are:

It ensures all end users are aware of obligations in relation to selection, use and safety when utilising information technology within the business
It is a proven way to help your managers and supervisors make consistent and reliable decisions
It helps give each end user a clear understanding as to what you expect and allow.

It takes a little effort to complete, but brings definite long-term benefits, reduces disputes, and adds to the professionalism of your business.

Download our Privacy Policy Template

When you're ready to commence formulating your organisation's privacy policy, download this Privacy Policy Template which you can then customise to meet your needs.

Information Security policy for Not-for-profits

We highly recommend that every Not-for-profit develop an Information Security Policy. This important document will outline what the organisation must have in place to protect its information from cyber security-related threats.

The Information Security Policy template is a great resource tailored for Not-for-profits of different sizes and risk profiles. To define and formally document your cyber security practices and processes, you can download and customise this template for your organisation.

An accompanying IT security register template is also available for download – this register will assist your organisation in the implementation of some of the security measures outlined in the policy.