Electronic Security This policy is designed to help prevent the loss or unintended release of confidential or sensitive information, theft or loss of electronic information, infection of Nonprofit Network computers, networks, and technology systems by limiting system weaknesses, preventing computer viruses or malware and ensuring protection against electronic predators. This policy is intended to help prevent damage to user applications, data, files, and hardware. PASSWORDS Nonprofit Network has adopted the following policies in order to create a standard for the creation and protection of strong passwords. Nonprofit Network Passwords are an essential element in the security of the organization's computers and devices. The Executive Director is Administrator for Nonprofit Network file sharing, software that has been purchased, and email programs. The Executive Director can reset passwords for these programs without having the current password. must keep secure passwords for their email, calendar and file sharing. Nonprofit Network retains the authority and ability to change a staff member's password for any reason, including resetting the password if forgotten, or to check an account's email if necessary. The Executive Director may designate a person to be responsible for administrative control of electronic access. Authorized users are responsible for the security of their passwords and accounts. There is an administrative process to manage risks and assure security protection, including external checks by a remote assessment and compliance check mandated to accept credit cards online. A threat assessment will be done as needed or if the environment warrants. Passwords will be changed if necessitated by the assessment’s findings. Passwords that grant access to Nonprofit Network financial information will be changed at least annually unless a threat assessment demands a higher frequency. Unauthorized use of passwords of other employees to gain access to others' sensitive or personal data is prohibited. While Nonprofit Network respects the individual privacy of its staff, a staff member cannot expect privacy rights that relate to work-related conduct or the use of Nonprofit Network owned equipment or supplies. Staff should note that the contents of messages on these systems are not entirely private. Nonprofit Network defines a strong password as one that: consists of at least 8 characters ● uses and upper case characters ● uses at least one number and one special character (examples: #$%) ● Nonprofit Network Staff should avoid passwords that are: names of pets, co-workers, family, etc ● important dates and numbers such as birthdays, addresses or phone numbers ● words or Numbers in patterns like 1234 or defg ● DATA AND INFORMATION SECURITY
Electronic Security This policy is designed to help prevent the loss or unintended release of confidential or sensitive information, theft or loss of electronic information, infection of Nonprofit Network computers, networks, and technology systems by limiting system weaknesses, preventing computer viruses or malware and ensuring protection against electronic predators. This policy is intended to help prevent damage to user applications, data, files, and hardware. PASSWORDS Nonprofit Network has adopted the following policies in order to create a standard for the creation and protection of strong passwords. Nonprofit Network Passwords are an essential element in the security of the organization's computers and devices. The Executive Director is Administrator for Nonprofit Network file sharing, software that has been purchased, and email programs. The Executive Director can reset passwords for these programs without having the current password. must keep secure passwords for their email, calendar and file sharing. Nonprofit Network retains the authority and ability to change a staff member's password for any reason, including resetting the password if forgotten, or to check an account's email if necessary. The Executive Director may designate a person to be responsible for administrative control of electronic access. Authorized users are responsible for the security of their passwords and accounts. There is an administrative process to manage risks and assure security protection, including external checks by a remote assessment and compliance check mandated to accept credit cards online. A threat assessment will be done as needed or if the environment warrants. Passwords will be changed if necessitated by the assessment’s findings. Passwords that grant access to Nonprofit Network financial information will be changed at least annually unless a threat assessment demands a higher frequency. Unauthorized use of passwords of other employees to gain access to others' sensitive or personal data is prohibited. While Nonprofit Network respects the individual privacy of its staff, a staff member cannot expect privacy rights that relate to work-related conduct or the use of Nonprofit Network owned equipment or supplies. Staff should note that the contents of messages on these systems are not entirely private. Nonprofit Network defines a strong password as one that: ● consists of at least 8 characters ● uses and upper case characters ● uses at least one number and one special character (examples: #$%) Nonprofit Network Staff should avoid passwords that are: ● names of pets, co-workers, family, etc ● important dates and numbers such as birthdays, addresses or phone numbers ● words or Numbers in patterns like 1234 or defg DATA AND INFORMATION SECURITY
Electronic%20Security%2010-23-14.docx