Nonprofit donor data security starts with the everyday tools your team uses . . .and “free” can come with a very expensive plot twist! Dan Hernandez of PCS Technology connects cybersecurity, AI policies, and smarter IT budgeting to protecting donor trust, preventing payment fraud, and keeping services running.

That discounted software looked like a win. The volunteer’s personal email seemed convenient. And the enthusiastic intern connecting AI to your CRM? Just trying to help! Each decision deserves a closer look at who controls your information, what support costs, and how your organization would recover if something went wrong.

Dan put nonprofit cybersecurity strategy where it belongs: alongside finance, fundraising, governance, and mission delivery. He shares a St. Vincent de Paul project that he says saved approximately $40,000–$50,000 annually by reducing licensing costs and streamlining processes.

The research behind the discussion adds urgency: UC Berkeley’s CyberCAN study surveyed 68 San Francisco nonprofits, and 85% reported at least one cyberattack. Those findings describe the surveyed organizations, but the management questions travel well.

We explore nonprofit AI data privacy, personal accounts, board impersonation scams, and the payment requests that arrive dressed as urgent executive instructions. Dan’s memorable finance rule: “Never change a payment from an e-mail.” Verify payment changes by calling a known number before money moves.

You’ll also hear why nonprofit data breach response planning needs leadership involvement, protected backups, and a donor communication strategy. As Dan puts it, “It can be a very expensive day if you have a hacking incident.”

Watch this one with your finance, development, and operations teams.  Great starter for some new ways to approach your tech. . .

 

Key Takeaways:

– Compare software’s total operating cost, including administration, support, and security.

– Keep organizational email and donor information under organizational control.

– Approve AI tools and review data settings before connecting business systems.

– Verify payment changes by phone using a previously known number.

– Train board members to recognize urgent executive impersonation requests.

– Assign incident response roles and prepare recovery and donor communications.

#NonprofitCybersecurity #DonorDataSecurity #TheNonprofitShow