Podcasts · Community IT Innovators Nonprofit Technology Topics

Cybersecurity Playbook for Nonprofits for AI pt 2

· 35 min · S7 E82

Episode Cybersecurity Playbook for Nonprofits for AI pt 2

0:00 35:11

In Part 2 of the Nonprofit Cybersecurity Playbook, Updated for AI webinar, Carolyn Woodard and Matthew Eshleman, CTO of Community IT, walk through the checklist at the heart of the new Start Here: Nonprofit Cybersecurity Basics download.

Part 1 made the case that AI changes the risks but not the basics. Part 2 gets specific about what those basics are, starting with one that is not technical at all: someone at your organization has to own cybersecurity, because you cannot outsource your risk.

Matt also answers listener questions on choosing a password manager and keeping your emails out of spam folders, then looks at new twists on old attacks. Phishing now arrives through calendar invites and shared documents, wire fraud is starting with a phone call again, and fake copyright notices pressure organizations to pay up rather than call their lawyer. Across all of them, the best defense is a culture where staff feel comfortable reporting anything that seems off.

Haven’t listened to Part 1 yet? Find it in your podcast feed.

This episode covers:

• Why phish-resistant MFA like passkeys is the next step, as vendors like Salesforce move to require them and Microsoft drops text and voice codes in February 2027. • How a password manager for every staff member, third-party spam filtering, and regular security awareness training reduce your biggest source of risk. Matt sees third-party filtering cut phishing volume by up to 80%. • Why AI-driven discovery of software vulnerabilities means more frequent patches, and why backups should extend beyond Microsoft and Google to your website, CRM, fundraising, and finance systems. • The policies to put in writing, including personal device use, official systems of record, and an AI acceptable use policy, even if your policy is that you don’t use AI. • Why your cybersecurity owner needs milestones, time, and support to do the work, not just one more thing on their plate.

Resources Mentioned:

• Nonprofit Cybersecurity Playbook, Updated for AI Webinar, Community IT • Start Here: Nonprofit Cybersecurity Basics, Community IT • Cybersecurity Readiness for Nonprofits Playbook, Community IT • Template, Acceptable Use of AI Tools in the Nonprofit Workplace, Community IT • Creating an IT Roadmap, Community IT • Podcast on DMARC and DKIM, Community IT • Webinar: Should Your Nonprofit Use AI? Community IT • Data Breach Investigations Report, Verizon

_______________________________ Start a conversation :)

• Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/ • email Carolyn at cwoodard@communityit.com • on LinkedIn • on reddit/r/nonprofitITmanagement • on the Community IT website

Thanks for listening.

Links in the notes 12

Transcript

    Shows are listed from Apple Podcasts' charts and directory, and Podcast Index where it is used. Every show and episode belongs to its publisher and plays from the publisher's own feed; this site hosts none of them. Explicit shows are for adult profiles only, and children’s profiles hear only children’s shows. More about this list.