Cyber attacks – what charities need to do

Charities should be aware of “WannaCry” and “Petya”. These are the cyber attacks that have brought organisations to a standstill recently. Many charities are not investing in adequate levels of cyber protection. The Charity Commission has warned that charities could be at risk and should be vigilant. Further Matthew Hancock the digital minister has said charities “must do better” to protect sensitive information they hold as it emerged that many smaller organisations rely on external IT providers to protect their data.
Data protection legislation requires that for every charity that controls personal data, for example information about staff or donors, “appropriate technical and organisational measures must be taken against unauthorised or unlawful processing of personal data”. A cyber-attack will usually result in unauthorised or unlawful processing of personal data. So charities need to take steps to resist cyber-attacks in order to comply with the law.
Technical measures include use of appropriate antivirus software, software updates and patches.
Organisational measures include raising awareness amongst staff and keeping working practices under review. Typical areas of vulnerability are:
 Mobile and remote working. A range of measures can be taken to minimise the risk involved in working remotely. For example, charities can keep the amount of data stored on a mobile device down to the minimum necessary to carry out the required business activity.
 Passwords. With individuals now expected to maintain numerous separate passwords, requiring users to regularly change their passwords is now considered to be potentially counterproductive. Password rules are necessary, but they should be simple and easy to follow.
 Email. Training to help staff to spot increasingly sophisticated phishing and spoofing, and avoid clicking on links or attachments, can reduce the risk of malware being introduced into systems.
Being the victim of a cyber-attack can be very unfortunate. But those organisations that have not taken appropriate technical and organisational measures to guard against these attacks will still be accountable for the loss. Staff must receive adequate training to deal with online attacks.

Similar Articles

Preventing and tackling c... The Fraud Advisory Panel have produced new resources to help you prevent, detect and respond to charity fraud. Check out https://goo.gl/2RrbPx
Charities Aid Foundation ... Charities have been helped to process over £70m of donations since the launch of CAF Donate. Figures released by CAF show that: £71.8m has now been raised
More charities ‘hav... A survey by the Ethical Property Foundation and the Charity Commission finds that nearly 60 per cent now struggle with this, compared with 41 per cent in
Good news for charity tr... The High Court has today ruled against the Official Receiver in its case for disqualification brought against the directors of the charity “Kids Company”, together with its CEO Camila
1% of charities get most ... Only 1% of  charities received 75% of  charitable income last year.Charities in England and Wales had a combined income of £72 billion in 2015 according to the
Blenheim Palace granted c... Blenheim Palace has been registered with the Charity Commission  as the “Blenheim Heritage Foundation” with objects including restoring and preserving the site for the public benefit and
Public should ensure dona... This is a Charity Commission press release:- Press release: Generous public should make sure donations go to genuine charities supporting the victims in Manchester, says charity regulator
Digital Technology – co... The digital age matters to trustees as it affects key areas such as strategy, governance, fundraising, marketing, cybersecurity, culture and service delivery. It also brings opportunities, risks
Guidance for trustees of... This guidance is for trustees of charities that have a long-term close relationship with a connected non-charitable organisation such as a: trading subsidiary commercial business not-for-profit organisation
Government launches new s... Free online resource for charities launched by the Government. It is a safeguarding portal created to help charities handle safeguarding concerns or allegations. See https://safeguarding.culture.gov.uk/ The portal

Leave a Reply

Your email address will not be published. Required fields are marked *