Tag

security

Dec 28

Why Credential Security is Critical for All Organizations

By Sponsor Insight

In the world of non-profit and non-governmental organizations, your mission is everything. Every dollar raised, every program executed, and every service provided works toward creating meaningful and lasting impact. But behind the scenes, a strong foundation of operational resilience is critical to protect your mission—and safeguarding your usernames, passwords, and pin codes, or credentials, is a cornerstone of that foundation. Ensuring that your organization maintains proper credential management and security protects your data, strengthens trust with stakeholders, maintains the operational integrity, and ultimately enhances your programming and service delivery.

Here’s why credential security matters and how implementing best practice solutions and policies can elevate your employee experience, protect your donors and beneficiaries, and support your executive leadership and board.

1. Credentials: The Keys to Your Organization

Every solution or service you use—whether it’s for fundraising, donor management, payroll, communications, etc.—requires secure credentials to function effectively. These credentials grant access to sensitive data and critical functions, but they also pose significant risks if mishandled or mismanaged.

The Risk of Neglect:

  • Shared logins can lead to poor accountability.
  • Using weak or undocumented credentials can expose your organization to cyberattacks.
  • Poor credential management disrupts workflows, creating inefficiencies. Remember that time the social media manager forgot the only login to the Facebook account and how long it took to recover it!

2. Why Credential Security is Non-Negotiable

For Employees:

  • Avoid Shared Logins: When team members share logins, accountability vanishes. If sensitive data is mishandled, it becomes nearly impossible to trace back the action. By assigning unique credentials to each user, you empower employees with the autonomy to do their jobs while ensuring clear accountability.
  • Ease with Single Sign-On (SSO): Implementing SSO reduces password and Multifactor Authentication (MFA) fatigue by allowing employees to log into multiple platforms with one set of secure credentials. This improves productivity and reduces the likelihood of insecure practices, like reusing weak passwords.

For Beneficiaries and Donors:

  • Trust and Confidentiality: Your beneficiaries and donors entrust you with their data—be it personal details, financial contributions, or sensitive case information. A breach in credential security can lead to a breach in trust, damaging your reputation and jeopardizing future funding and support.
  • Data Protection: Proper credential security ensures their data is safeguarded from unauthorized access, giving them confidence in your organization’s ability to protect their information.

For the Executive Director:

  • Operational Continuity: When credentials are properly documented and secured, your organization avoids disruptions caused by lost or inaccessible logins. This is critical during staff transitions or emergencies.
  • Strategic Oversight: Credential security provides the Executive Director with the assurance that the organization is operating efficiently and securely, enabling them to focus on advancing the mission.

For the Board:

  • Governance and Compliance: A well-documented credential management process demonstrates to the board that the organization is minimizing risks, aligning with best practices, and adhering to compliance requirements.
  • Mission Assurance: The board has a fiduciary duty to safeguard the organization’s assets, and credential security is an integral part of protecting those assets.

For the Mission and Programming:

  • Efficiency: Securely managing credentials reduces downtime and inefficiencies caused by password resets or security breaches, allowing staff to focus on what truly matters—delivering impactful programs.
  • Resilience: A secure credential management system ensures continuity even during unexpected events, such as turnover or cyber incidents, so that programming remains uninterrupted.

3. Best Practices for Credential Security in Non-Profits

  1. Document All Credentials

Credential security begins with documentation. This means keeping a record of logins for every technical solution and service—not just IT tools. For example:

  • Grant management software
  • Fundraising platforms
  • Event registration systems
  • Volunteer management tools

Documenting credentials ensures no access is lost during transitions or emergencies.

2. Avoid Shared Logins

While shared logins may seem convenient, they are a major security risk. Every user should have their own unique credentials. This improves accountability and ensures that permissions are properly aligned with each individual’s role.

3. Implement Single Sign-On (SSO)

SSO simplifies the login process by allowing employees to access multiple systems with one secure set of credentials. This reduces password fatigue, streamlines workflows, and minimizes the risk of weak passwords being used across multiple platforms.

4. Use a Credential Management System

Invest in a credential management system to securely store, manage, and share credentials as needed. Features like encryption, role-based access, and auditing capabilities provide peace of mind and protect against unauthorized access. Popular solutions like Keeper or Bitwarden for Business can be scaled to meet non-profit needs.

4. The Ripple Effect of Strong Credential Security

When your organization adopts credential security best practices, the benefits cascade throughout the organization and beyond:

  • Empowered Employees: Staff can focus on their work without the frustration of lost or inaccessible credentials.
  • Protected Beneficiaries: Sensitive beneficiary data remains confidential, maintaining trust and ethical responsibility.
  • Confident Leadership: Executive directors and board members can focus on strategy and growth, knowing that operational risks are managed.
  • Mission-Driven Impact: Secure, efficient systems free up resources and time to invest in programs that drive your mission forward.

5. A Call to Action

Credential security isn’t just an IT concern—it’s a mission-critical responsibility. By documenting credentials, avoiding shared logins, implementing SSO, and leveraging a credential management system, your non-profit can build a foundation of trust, accountability, and resilience. Ultimately, this enables your organization to focus on what truly matters: serving your community and achieving your mission.

Let’s safeguard your operations so your impact can reach new heights. Start securing your credentials today.

Jun 21

Developing a successful hybrid-work model

By Sponsor Insight

By Cody Lents, Partner and Change Manager at COVI, Inc.

Empower employees with choice
As vaccinations trend up and restrictions trend down, a significant number of workers are set to return to the office in coming months. Your extroverted employees are undoubtedly excited. However, their introverted counterparts may not share the same enthusiasm. So, how can you maximize morale and culture to enable the best performance out of both groups?: A thoughtfully-designed hybrid Work-from-Home (WFH) model that prioritizes both the needs of your organization’s employees and processes.

Lay the groundwork for success
The first critical step in transitioning into a hybrid WFH model is developing and communicating processes that level the playing field for both in-house and remote workers. Set clear expectations about your organization’s internal communications, cyber insurance, bring-your-own-device (BYOD) policy, etc., to ensure that remote workers don’t feel left behind compared to their in-person colleagues.

While remote work can be an opportunity to cut “traditional” office costs, leverage it as an opportunity to invest in your workforce. Consider using what your organization saves on overhead to provide your employees with a stipend to make working remotely more comfortable. This allows employees to outfit themselves at home with equipment like an ergonomic chair, an extra monitor, noise-canceling headphones, etc.

At the office, consider re-developing your organization’s layout to better accommodate a hybrid approach: dedicated “open-space” plans for those in and out of the office, private offices for focused work, and spaces specifically designed to encourage collaboration/socialization both face-to-face and virtually.

Invest in your infrastructure
The next critical step in transitioning your organization to a hybrid approach is ensuring your infrastructure is capable of handling the needs of employees working in different spaces. Now may be the time to upgrade your organization’s software to the enterprise level so that you can take advantage of security, communication and collaboration features.

Migrating your organization’s servers to the cloud is another way to streamline efficiency for your remote workforce. This makes it easier for your employees to collaborate and share files via a centralized location in which they can upload/save their work to.

Don’t compromise on security
With employees using a mixture of personal and company devices, it’s imperative that your organization communicates a clear security policy to ensure the safety of your data. The following three steps are a great start to a more secure digital infrastructure:

  • Determining what endpoint protection your remote workers need will aid in virus prevention. Windows Defender is a great antivirus software included in Windows 10, however, it does not meet the compliancy and security minimums of today’s security landscape.
  • Implementing two-factor authentication [2FA] is a secure way to ensure that only admins and users are allowed into accounts that would otherwise be vulnerable to cyber attacks.
  • Utilizing a virtual environment that allows devices to connect to a secure server or service, as opposed to a user’s internet connection, allows your organization to keep information encrypted, private, and safe.

Questions?
Now is the perfect time for a comprehensive technology assessment to prepare for the new-normal in our evolved workspaces. If you want to discuss what an assessment entails or if you need assistance implementing a hybrid-work approach for your organization, reach out to COVI at cody@gocovi.com for help. COVI is an Information Technology (IT) agency specializing in productivity, security, support and strategy services, located in Indianapolis, Indiana.

Nov 09

Donate Safely This #GivingTuesday

By Sponsor Insight

Best Practices for Charities and Individual Donors

By Cody Lents, Partner and Change Manager at COVI, Inc.

Since it was first founded in 2012, #GivingTuesday has become known as a charitable movement built around a simple idea: Set aside a day that encourages people to do good. Over the past seven years, #Giving Tuesday has transformed into a global day of unity that has inspired hundreds of millions of individuals to give, collaborate and celebrate generosity in their communities.

GivingTuesday’s data reported $1.97 million was raised for reputable charities around the globe in 2019. But could the number have been even higher? A few months prior, the Federal Trade Commission (FTC) kicked off “International Charity Fraud Awareness Week,” a coordinated effort to help charities and donors avoid a growing number of scam groups masquerading as charitable organizations. Using tax deduction as bait, fake charities have often lured unsuspecting victims into making ineligible donations.

With the next #GivingTuesday quickly approaching on Dec. 1, 2020, what can you do to ensure your donation ends up in the right hands this holiday season? And, as a charity, how can you ensure prospective donors feel comfortable about allocating funds to your cause?

Best Practices for Individual Donors

  1. Give to established, trusted organizations.
    The easiest way to immediately confirm the legitimacy of a charitable organization is through the IRS’ “Tax Exempt Organization Search”, which allows donors to search for qualified charities in which donations may be tax-deductible. Legitimate charities will provide their Employee Identification Number (EIN) upon request.
  2. Use credit cards or checks.
    If a charity is attempting to solicit a donation through cash, gift cards, virtual currency, or wire transfer, it is most likely a scam. For security and tax record purposes, it is safest to contribute by check or credit card.
  3. Be skeptical of copycats and disaster relief.
    Exercise caution when examining charities with names that are similar to nationally known organizations. Scammers may use names, domains, etc. that sound or look like those of respected, legitimate organizations.

Following natural disasters, it’s common for scammers to impersonate charities to solicit personal financial information from victims and those looking to donate–don’t give out personal financial information, such as Social Security numbers or passwords to anyone who solicits a contribution.

Still unsure? Run the organization’s name through Charity Watch or Charity Navigator to browse reviews, ratings and reports from other donors.

Best Practices for Charities & Nonprofits

  1. Educate your donors.
    Whether on your website, social media or mailings, share information that instills confidence in those who want to contribute to your cause. Use the above best practices for individual donors as a guide.
  2. Implement a payment processor on your site.
    This allows your organization’s website to accept all online payments directly through the website, as opposed to sending donors off-site to a third-party platform. When your donor enters their payment information on your site, their card information is sent through a payment gateway to be validated. If the card’s information is legitimate, the transaction will be processed by your payment provider.

This process provides donors a more streamlined and credible experience and keeps them on your website for longer. Here is a comparison of eight trusted payment processors.

Questions?
If you need assistance vetting a charity or setting up a payment strategy for your nonprofit/charitable organization, you can reach out to COVI at cody@gocovi.com for help. COVI is an Information Technology (IT) service provider specializing in productivity, security, support and strategy services, located in Indianapolis, Indiana.

Sep 08

How to Protect Yourself and Your Organization from Fraudulent Attacks

By Sponsor Insight

Malicious cyberattacks cost the U.S. economy as much as $109 billion in 2016, the Council of Economic Advisors reported. Three years later, in 2019, individuals and organizations experienced record losses due to fraud, identity theft and other related complaints, according to the Federal Trade Commission (FTC).

During the current global pandemic, fraudulent activity has continued to increase. Today, we have a lot to be overwhelmed by, but knowing how to best protect yourself now can keep you safe for the future.

The following includes important information and tips to minimize your risks of becoming victimized by fraudulent attacks:

Why are fraudulent attempts on the rise? According to the Fidelity National Information Services, Inc. (FIS), criminal activity involving pilfered credit card numbers and phishing attacks has increased during the COVID-19 pandemic — targeting both consumers and banks. Also, with the decline in travel and shopping at brick-and-mortar stores, more and more fraudulent attacks have shifted to the internet.

FIS reported that the dollar volume of attempted fraudulent transactions increased by 35% in April 2020, when compared to April 2019. It also noted that the trend seemed to be continuing.

What does a fraudulent attempt look like? Fraudulent attempts come in many different forms, including emails, robocalls, direct messages, credit card charges, ransomware and wire transfers that may appear legitimate. In many cases, scams will materialize as claims from government entities, financial institutions, or large organizations (like a utility company). The most prevalent methods of cyberattacks include randomly computer-generated card numbers, attempted purchases with card numbers previously stolen, and phishing attacks (emails, phone calls, and direct messages.)

How can you protect yourself and your organization?

  1. Be alert. Keep a close eye on all accounts. Most banks will alert you via call or text, but you know your purchases best. An automated alert could be generated by another fraudster. After email security has met a best practices baseline, employee training and testing is the best way to prevent a breach.
  2. Stay safe. Understand the differences between credit card and debit card use. The government limits your liability on fraudulent credit card purchases to $50. Also, it usually takes much longer to get funds reimbursed with a debit card than a credit card. Lastly, a credit card freeze is much less impactful to a person’s ability to carry on their day-to-day activities than if their bank account is frozen.
  3. Be proactive. Know how to freeze your accounts. Some financial institutions provide online or app-based access to allow you to quickly and easily complete this function. If your bank or credit union doesn’t, call immediately to ask them to freeze your account after you notice any fraudulent charges appearing in your purchase history. You can also limit the number of breach attempts through an investment in enhanced spam filtering services and Advanced Threat Protection safeguards. Enhanced email back-ups also can help prevent major losses.
  4. Know how to handle anything that comes your way. If it looks suspicious, it probably is. Be diligent when it comes to answering robocalls, opening emails, and responding to voicemails. Keep contacts up to date and block unknown callers. Take the time to learn more about how to secure your phone (Apple, iPhone, iOS, and Android). With COVID-19 related scams on the rise, it’s also important to educate yourself, friends, co-workers and relatives with the latest consumer scams reported by the FCC.
  5. Know what to look for when reviewing suspicious or official-looking documents and messages. Beware of the following:
    – Communications with terms like “stimulus check” or “stimulus payment.” The Internal Revenue Service (IRS) will use the term “economic impact payment.”
    – Requests to “sign over” a stimulus check
    – Anyone requesting bank information or direct deposit information by way of phone, text, email, social media or other messenger apps
    – Postal mail receipt of a [fake] check with a request to call a number or verify information online to cash it.
    – Malware or virus packages using Covid-19 as an incentive to open them.
    – New Covid-19-related websites; they could be designed to scam or defraud visitors.
    – Work-at-home infrastructure attacks. Ensure your employees have a firewall when using company or personal devices for work-related activities.
  6. Seek expert help. The time to detect vulnerabilities is not after you have been a victim of an attack. At Covi, we help our clients navigate changes in technology, including the latest cyber security measures to protect you and your organization from malicious behavior by hackers.
Nov 18

Collecting Donations for Your Nonprofit Organization

By Sponsor Insight

By Dave Voris, Vice President and Regional Manager, Horizon Bank

Are you running a nonprofit organization? If so, you know that sustainable donations are a critical part of living up to and meeting the IRS’s public charity test and fulfilling your mission.

Whether your organization is directly serving others, working on valuable research, or meeting recreational needs in your local community, your donors need easy and safe ways to contribute.

Leverage your website

Chances are, you’re already using a website to communicate with your target audience, which includes donors. But to maximize the advantages of your site, be sure to allow for donation submissions as well.

According to Mobile Cause, there must be a compelling reason for site visitors to use a pay portal. If a donor is inspired by your organization’s message and wants to give, most likely they’ll want to give NOW. As a nonprofit you should strive to minimize the number of steps required to send a donation. The more steps required, the easier it is to lose the donor’s attention. Mobile-friendly donor buttons make it easy and possible for your supporters to take action quickly and from any geographic location.

Here’s how to make it work best for you:

  • Look for a payment portal service that can be integrated into your site. Sites like Double the Donation can provide you tips about what to look for. Such services typically take a small fee from each donation, as payment for their services. This makes credit card processing, overall, a little more expensive than handling other payments — but the ability to make this type of donation is in high demand. Locally, Horizon Bank offers payment processing systems that can work for you. Just contact us for details on how we can help your nonprofit organization with this need.
  • Implement your payment portal to allow for either a one-time donation, or recurring monthly donations. This makes it easy for both you and your donors.

Next, you need to communicate the service to your audience:

  • Make it easy to find your payment portal. One simple way to increase online giving is to make sure your visitors have no trouble finding your DONATE or GIVE button when donors visit your website.
  • Then, send out periodic reminders through several channels — an e-newsletter, social media and other communications — to drive new or repeat donors straight to your website to make contributions to your cause.

Recurring donations will, of course, be very beneficial to help you handle general operating costs like rent, salaries, event costs, and more. Those donations are spread throughout the year and are contributions you can factor into your annual plan.

For many organizations, online fundraising works to spread your mission and make sure donors and potential donors understand what your nonprofit does and why they should donate to your cause.

Dave Voris is a vice president in the Indianapolis market for Horizon Bank, N.A. As a senior treasury management officer, he works closely with middle market, nonprofits, and small business companies in a broad span of industries. His 25 years of business experience have included treasury management, merchant services, and international banking including sales management, client service and implementation management, product management and electronic payment operations.

Need more ideas? Reach out to an advisor at Horizon Bank. And check out this additional idea for bridging financial gaps. We’re always happy to help, with some Sensible Advice! contact us today.