How do we protect donor data and payment information?

Donor records carry names, addresses, giving history, and sometimes payment details, which makes them worth stealing and damaging to lose. The core controls are multi factor authentication on every account, restricting donor database access to the people who need it, using a payment processor so card numbers never live on your systems, and training staff and volunteers on the fraud attempts that target nonprofits specifically.

Fake donation confirmations and messages impersonating your executive director are extremely common against nonprofits.