Cybersecurity for NGOs: Session 2: Protecting the Data NGOs Handle: Donors, Members, Beneficiaries

NGOs and associations are increasingly targeted by cyberattacks. They hold personal data about donors, members and beneficiaries, but often have little IT support. This course gives employees, volunteers and board members of Luxembourg NGOs a practical understanding of the cybersecurity risks they face, and the everyday habits that reduce those risks the most.

The module runs as three one-hour sessions, back to back. Session 1 covers the most common threats, such as phishing and social engineering, and the simple habits that protect against them. Session 2 focuses on keeping the data NGOs hold safe: what counts as sensitive, how to store and share it securely, and what to do if it is lost or leaked. Session 3 builds a simple incident-response reflex through a short simulated incident, worked through in small groups. Each module combines short explanations with real-world examples and hands-on exercises.The course is intended for NGO staff, volunteers and board members. 

- What sensitive data means for an NGO: donor records, beneficiary information, health data, information about minors, financial records

- Who can access what: access rights and secure accounts

- Safer storage and sharing, including with volunteers, board members and partner organisations abroad

- Collecting and keeping only the data you need

- Guided exercise: list what personal data your NGO collects, where it is stored and who can access it

- What to do if data is lost, leaked or accessed by mistake: the first steps.

-protect sensitive donor, member and beneficiary data when storing and sharing it

Lecture

Real-world scenarios / examples

Practical exercises

Group work