Nonprofits should consider internet isolation cloud solutions in their IT security designs

Sharing below a nice article on internet isolation cloud solutions as a paradigm for implementing security.

A boundary-less IT security defense architecture (design) is definitely one that nonprofits should consider. And the reason for this is business necessity.

Nonprofit business architectures (designs) continue to require operational and even strategic collaboration and partnerships with a variety of global and local partners. These partners are all over the world and in some cases include national governments. The data nonprofits handle includes that of vulnerable and insecure populations. To operate effectively with such populations, nonprofits must maintain relationships of trust with these clients. The trust must in turn be supported by robust data stewardship and security practices, including regulatory compliance regimes. This is because for nonprofit enterprises to be effective today and looking ahead into the future, their sensitive data will need to be shared more often. They will be more exposed to partners having different IT capabilities and a amyriad IT security postures, including no security capacity.

Nonprofit IT security designs must follow the direction of their business designs or fail to be effective in business environments and relationships they must support.

Let me know what you think of the article.

securityboulevard.com/2019/09/internet-isolation-cloud-introducing-a-new-paradigm/

10 Things Keeping Nonprofit Auditors Up At Night – The NonProfit Times Article

What is on your audit plan for 2019? Have you begun to consider topics to address? Here’s a list of the top 10 challenges keeping nonprofit auditors up at night, and possible remedies (see link below) to help auditors continue their critical contributions to nonprofits.

  1. Changes to organizational strategy
  2. Organizational culture
  3. New technology
  4. Cybersecurity
  5. Compliance with funder requirements
  6. Financial controls
  7. Reliance on third parties
  8. Procurement procedures
  9. Transportation and distribution (logistics)
  10. Fraud and corruption

What do you think? I definitely agree with a good many of the items on the list.

In my experience the challenge is that nonprofit management and boards tend to constraint auditors to execute cyclical and compliance based audits of various organization segments/units and organization partners. This mostly out of habit and such audits tend to miss important entity level risks.

Click the article for more details and for some great proposed remedies. I might add that I know the authors well and they are quite knowledgeable about the challenges.

Source: 10 Things Keeping Nonprofit Auditors Up At Night – The NonProfit Times