Cybersecurity for NGOs: Session 2: Protecting the Data NGOs Handle: Donors, Members, Beneficiaries

NGOs hold sensitive personal data about donors, members and beneficiaries, sometimes including health data or information about minors. This session focuses on keeping that data secure: who can access it, where it is stored, how it is shared, and what to do if it is lost or leaked.

It is one of three independent one-hour sessions in the “Cybersecurity for NGOs” series, delivered by Master in Cybersecurity and Cyber Defence (MCYSD) students of the University of Luxembourg, under academic supervision, in partnership with the Digital Learning Hub. Each session can be attended on its own.

The session is for staff, volunteers and board members of Luxembourg NGOs and associations. No technical background is needed.

- Identify which data your NGO holds is most sensitive.

- Control who can access what, with secure accounts and access rights.

- Store and share data safely, including with volunteers, board members and partners abroad.

- Know the first steps if data is lost, leaked or accessed by mistake.

One-hour interactive workshop, on site at the Snt and online via Microsoft Teams: a short lecture, anonymised real-world examples from the NGO sector, a guided exercise to list the personal data the NGO holds, where it is stored and who can access it, and Q&A. Participants take home a simple template to list the personal data their NGO holds.