Nonprofit Cybersecurity Risk Assessment Basics
This webinar presents a best-practices framework on assessing your risks, using the National Institute of Standards and Technology (NIST) privacy risk assessment methodology. Matt Eshleman, Community IT Innovators’ CTO and resident cybersecurity expert, will teach you how to Understand the cybersecurity threats facing nonprofits perform a basic assessment using our NIST survey tool understand the recommendations budget for risk prevention engage nonprofit executives in supporting proactive cybersecurity create an actionable road map with next steps for your organization Over the last few months, many organizations began to use personal computers and devices for work, quickly set up cloud file sharing platforms, put the entire remote office on Slack or Teams, or moved to using Zoom for conference calls. Even if we did our best to implement thoughtful security protocols and train new users on new tools, circumstances have made measured approaches to cybersecurity difficult. Your practices are probably out of sync with your security needs. You know your nonprofit organization is at risk. But do you know how to manage cybersecurity risk? Now is the time to better manage risks by reviewing your cybersecurity stance and (re)training your users on security best practices.
Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Was ist angesagt?
Was ist angesagt? (20)
Ähnlich wie Nonprofit Cybersecurity Risk Assessment Basics
Ähnlich wie Nonprofit Cybersecurity Risk Assessment Basics (20)
Mehr von Community IT Innovators
Mehr von Community IT Innovators (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Nonprofit Cybersecurity Risk Assessment Basics
- 2. About Community IT Advancing mission through the effective of technology. 100% Employee Owned
- 4. Agenda Cybersecurity Landscape •Perform Risk Assessment •Budget for risk prevention •Engage Executives •Develop a roadmap
- 5. CYBERSECURITY LANDSCAPE Persistent and ongoing brute force attacks on identities Sophisticated spearphishing Organizations targeted because of the work they do Attacks targeting vendors
- 6. CYBERSECURITY LANDSCAPE New security tools available to combat new threat types. Organization’s starting to ask about where to start in improving their cybersecurity. 68% of Nonprofits don’t have an Incident Response Plan Breach response for a small to medium business is $149,000
- 7. NextGen Tools IDENTIT Y DATA DEVICES PERIMETE R WEB SECURITY AWARENESS SECURITY POLICY OUR APPROACH TO CYBERSECURITY
- 8. 06 CYBERSECURITY INCIDENTS INCIDENT TYPE COUNT OF INCIDENTS COUNT OF SAMPLE % OF SAMPLE EXPERIENCE INCIDENT Spam 378 51 71% Malware 50 31 43% Account Compromise 15 12 17% Business Email Compromise 59 35 35% Wire fraud 3 3 4% Virus 3 3 4% Advanced Persistent Threat 1 1 1% Supply Chain 0 0 0% Ransomware 0 0 0% Grand Total 509 72
- 9. Compare Year over Year
- 10. Trends Cybersecurity incidents on the rise Spam continues to be a problem Business Email Compromise biggest headache Account compromise is still at a high level
- 11. Available Assessment Options NIST CSF Survey Core Assessment Comprehensive Assessment Penetration Test Survey X Review X Detailed Discovery X X People X X Process X X Technology X X X High Level Roadmap X X X Comprehensive Roadmap X Level of Effort 1 hour 20 hours 80-100 hours $20K and up
- 12. NIST 800-53 • NIST is one cybersecurity framework • Developed for FederalAgencies & Contractors • 1683 line spreadsheet of controls
- 13. RISK MAP
- 15. Getting Started with Cybersecurity IT Policy Security Awareness Training OS and Third Party Updates Antivirus Backups MultiFactor Auth Business Email Compromise Protection
- 16. Top Three Cybersecurity Controls • Included with most Cloud Applications • With EMS ($2.20) can upgrade to conditional access and SSO Multi-Factor Authentication • Lots of options out there • KnowBe4 is the leader, ~$20/user for the license Security Awareness Training • Protects against spear phishing • Barracuda Sentinel includes account takeover protection, DMARC/DKIM administration. $3/account Business Email Compromise Protection
- 17. Engage your Leadership Requires leadership to say yes Poor cybersecurity is an organizational liability All organizations are vulnerable
- 18. Engage your Leadership Schedule • Schedule time for security • Monthly reporting • Quarterly planning Know • Know your audience • Narrative • Metrics and numbers Leverage • Leverage existing compliance requirements • PCI • HIPAA • GDPR
- 19. Next Steps Schedule Schedule time with leadership Get Get access to survey Tool Review Review existing controls
- 20. Next Month Build Consulting • Microsoft Dynamics and Salesforce: What you need to know before choosing a platform
- 21. cybersecurity@communityit.com © 2018 Community IT Innovators, Inc. All Rights Reserved. www.communityit.com THANK YOU!
Hinweis der Redaktion
- Success can be driven from bottom up Success can be driven from the top down