Not-for-Profit Cyber Security Checklist

This document is a checklist designed for not-for-profit and membership organizations to enhance their cybersecurity posture. It emphasizes that safeguarding sensitive information is an ongoing process rather than a one-time task. Organizations are encouraged to regularly review their cybersecurity strategies using established frameworks, such as the Essential Eight, to bolster their resilience against cyber threats. The checklist includes several key recommendations, such as implementing multi-factor authentication for all users, ensuring regular backups of important data, and keeping software up to date with the latest security patches. Additionally, it advises on limiting admin privileges, blocking unauthorized applications, and establishing an incident response plan to manage potential cyberattacks. Training staff and volunteers in cybersecurity hygiene and creating a cybersecurity awareness program are also highlighted as essential components of a robust security strategy.