Cyber Quote Form

e.g. a website domain such as charity.org.uk and/or a business email domain e.g. charityemail.org.uk

If you have any other alternative domains (not sub-domains) that you use for different websites, you can also enter these. e.g. a fundraising site at charityfundraising.org.uk or portal at charitycases.co.uk

Includes having MFA set up on Outlook, Gmail, Desktop and Mobile Email Clients.

e.g. VPN, Remote Desktop Protocol.

Remote Access: The ability to connect to your charity’s computer systems or network, from another location, over the internet. It allows staff or volunteers to work from home or while travelling.

Remote Desktop Protocol (RDP): A tool from Microsoft that lets you use your computer from somewhere else, by connecting to it over the internet or network. It allows you to see and control your desktop remotely.

Virtual Private Network (VPN): A secure, encrypted connection between a device and a network over the internet. It helps keep sensitive data safe, especially when connecting remotely to your charity’s systems.

e.g. Local Area Network (LAN), Intranet, Microsoft 365, Google Workspace.

Privileged User Account: A user account with special access rights that allow it to make important changes to systems, install software, or access sensitive data. These accounts need strong protection because of the high-level access they have.

Network Administrator: A person responsible for managing and maintaining your charity’s computer network. They make sure everything runs smoothly, securely, and that users have the access they need.

Cloud Administrator: A person who manages your charity’s cloud-based systems and services. They handle things like user access, data storage, security settings, and system updates in the cloud.

Encryption: A way of scrambling data so that only people with the right key or password can read it.

Note: Most modern devices running up-to-date operating systems have encryption enabled by default.

Portable Media Devices: Small, removable storage tools like USB sticks, external hard drives, or memory cards that can be used to store and transfer data.

The reason for doing this is so that the backups are not on the same network or live environment which would put them at risk of being damaged or destroyed in the same event of a successful cyber attack. You should test to make sure those backups are recoverable. Many platforms will have backup functionality that you will be able to utilise.

Sensitive Data: Sensitive data is a special category of personal data such as information about a person’s health, race, religion, political opinions, sexual orientation, or biometric data. This type of data needs stronger protection because of the potential harm or discrimination that could result if it’s mishandled.

Critical Data: Information that is vital to your charity’s operations. This could include donor databases, financial records, or service user data. If lost or unavailable, it could seriously disrupt your work or services, even if it’s not legally defined as personal or sensitive.

Privacy Rights: The rights people have to control how their personal information is collected, used, and shared. These are protected under UK GDPR.