Search Results

A one-page playbook for small and mid-size organizations Failed logins are normal background noise on the internet. The real question is whether any are succeeding, and whether your accounts are protected if one does. Step 1: Check if anything got in Sign in t...

Facebook is designed for sharing with friends, so you can't make a profile that hides everything from friends too. The closest you can get is: Hide everything from non-friends (the public). Use the "Only me" setting on individual fields you don't want anyone ...

The Issue A company called WebinarTV has been scanning the internet for public Zoom links, sending bots into meetings as silent attendees, recording everything, and publishing the results as AI-generated podcasts, without notifying participants. This isn't a d...

A Step-by-Step Guide to SPF, DKIM, and DMARC What Is This? Every day, scammers send emails pretending to be from organizations like yours. They use your organization's name and email domain to trick your staff, donors, and community members into clicking malic...

Google Workspace for low-sensitivity work, Tresorit for medium- and high-sensitivity data. This checklist walks through classification, setup, migration, and the policy decisions that make the split actually hold up in practice. 1. Classify Your Data Before Yo...

A framework for classifying documents by sensitivity. The three tiers Tier What Examples Sharing Low Public or public-ready Blog posts, marketing, published reports Anyone with the link is fine Medium Internal, not secret Meeting notes, draft strategy...

A personal device isn't set up the way a work laptop is. Nobody's checked that it's locked down, up to date, or free of other apps and accounts mixed in with work stuff. You can't turn it into a full company laptop that's not realistic. What you can do is eith...

A guide for mission-driven organizations on how large language models work, where they help and fall short, and how to choose the right level of investment in AI tools. 1. What Is a Large Language Model, and Why Does It Matter? A large language model, or LLM,...

A companion guide to Understanding and Using AI Responsibly, for organizations weighing whether to move from free or individual AI accounts to an enterprise-tier license. Once staff start relying on AI regularly, organizations face a real decision: stay on fr...

1. Before You Leave Turn on full-disk encryption on (FileVault for Mac) and set a strong passcode Complete backup of both devices to encrypted storage at home 2. Turn Off Biometrics Disable Face ID / Touch ID Re-enable once you're through, if desired 3...

[CLIENT NAME] Effective Date: [Insert Date] Last Reviewed: [Insert Date] 1. Purpose and Scope This Artificial Intelligence (AI) Policy establishes clear, ethical, and responsible guidelines for the use of AI technologies within [CLIENT NAME]. As generative AI...

[NAME OF ORGANIZATION] Effective Date: [Date] Policy Owner: [Insert Name] Last Updated: [Date] Review Date: [Annual Review Date] IMPORTANT: Print this document and store it in a safe physical location. During an incident, you may not be able to access the digi...

Incident Response Checklist (First 30 Minutes) Immediate Actions STOP - Don't continue using compromised accounts/systems Document everything - Screenshot with timestamps before systems change Assess safety - Is there immediate physical threat to staff? A...

Incident Response Checklist (First 30 Minutes) Immediate Actions STOP - Don't continue using compromised accounts/devices Document everything - Screenshot with timestamps before anything changes Assess safety - Is there an immediate physical threat to you?...

Follow these steps immediately when an incident occurs: Step 1: STOP & DOCUMENT STOP using the affected account or device immediately Don't panic—take a breath and think clearly Take screenshots with full URLs and timestamps (not crops) Document what happened...