Community IT Innovators Nonprofit Technology Topics

Community IT Innovators

Community IT offers free webinars monthly to promote learning within our nonprofit technology community. Our podcast is appropriate for a varied level of technology expertise. Community IT is vendor-agnostic and our webinars cover a range of topics and discussions. Something on your mind you don’t see covered here? Contact us to suggest a topic! http://www.communityit.com

  1. Cybersecurity, Viruses, Phish-Resistant MFA with Matt Eshleman

    17 HR AGO

    Cybersecurity, Viruses, Phish-Resistant MFA with Matt Eshleman

    Nonprofit Cybersecurity expert and Community IT CTO Matt Eshleman offered his take on these trends. Listen for expert advice on avoiding new computer viruses and making sure your organization is protected from Attacker-in-the-Middle attacks on MFA (Multi-Factor Authentication), particularly for important accounts like your Executive Director and CFO. Fighting Viruses Virus attacks have been increasing. These computer viruses are no longer just malware that “infects” your network through an email link or website. Bad actors know we are suspicious of links in our email and that these days most malicious emails are stopped from reaching our inboxes. As a work around, they have started sending a document with instructions to open the document with a “secure code” – actually a malicious code. In this way, they trick the victim into running the attack against themselves. To resist this attack, always think – if the document you need to open is legitimate, and the person emailing it to you is genuine, they can send you a pdf. You should be very suspicious of any attachment that requires another set of steps to open, particularly executing code on your computer.Other ways you may pick up a computer virus: downloading something malicious online. Be careful to double check you are on a legitimate site before downloading anything. Better yet, use the App Store where possible. We are also seeing an increase in malicious pop-ups. If a window opens on your computer saying you have a virus, it can be scary. Always contact your own IT provider. Do not follow the directions the pop up is giving you to get “support,” or you will be calling the scammer. Using Phish-Resistant MFA Community IT continues to recommend that all users use a Multi-Factor Authentication method on all accounts.Because MFA is so effective, it is not surprising that attackers are trying to work around it. In the past few years Attacker-in-the-Middle attacks have been on the rise. In this attack, the bad guys trick a user into “logging in” in a way that exposes their secure token for the attacker to steal. The attacker can then login as the user from a different device and gain access to anything the user has access to.Phish-Resistant MFA, like using a passkey or Microsoft Hello, will only allow the MFA to be authenticated from the device where you are. You can also use a physical key like Ubikey or FIDO, which must be present to allow the login.Community IT is recommending at a minimum that all accounts with access to sensitive data such as Executive Director, CFO, maybe Board members, the executive team, should use Phish-Resistant MFA to best protect the organization. Of course, any access to your network is a risk, so where possible, investing in Phish-Resistant MFA for all staff is a good investment.Training on Phish-Resistant MFA can lessen the friction or feeling that an extra step is required. Most Phish-Resistant MFA is quick to use and easy to learn. Peace of mind is worth it. Community IT hopes that building this culture of care at your organization makes it easier for you to update your staff on new threats and scams through your regular training program.  _______________________________ Start a conversation :) Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/ email Carolyn at cwoodard@communityit.com on LinkedIn Thanks for listening.

    20 min
  2. How to Rescue a Nonprofit Technology Project with Change Management pt 2: with Debbie Cameron

    26 SEPT

    How to Rescue a Nonprofit Technology Project with Change Management pt 2: with Debbie Cameron

    Change Management Lessons with Debbie Cameron Build Consulting Partner Debbie Cameron and change management expert in a webinar on when you can rescue a nonprofit technology project using change management techniques.  In part 1, Debbie describes the philosophy of change management and how these techniques work in helping the people at your organization understand and adapt to big changes. In part 2, she discusses how to rescue a failed project and some techniques to turn a project around. She also gives a mini-case study and takes audience questions. It is never too late to go back and re-assess where change management best practices can help. Learn how to use change management principles to get more out of your nonprofit technology investments and rescue a tech project that hasn’t succeeded – yet. Do you have a technology tool that is not living up to expectations? In an ideal world, change management would help inform three main phases of technology project implementation: planning, during, and after go-live. Build Consulting curated a three-part video series with Debbie Cameron, change management expert at Build Consulting, walking through the Build philosophy and providing best practices and examples at each stage of nonprofit tech project management. But what if you weren’t present for the entire project? What if you are facing a project that isn’t going well – that you inherited – a technology tool that your organization is paying for but everyone hates – a tool your organization is stuck with … is there still a role for good change management? Is it too late to use change management best practices to rescue these projects? In this new webinar, Debbie shares techniques and tools to help analyze where change management can support implementation after technology change. _______________________________ Start a conversation :) Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/ email Carolyn at cwoodard@communityit.com on LinkedIn Thanks for listening.

    21 min
  3. How to Rescue a Nonprofit Technology Project with Change Management pt 1: with Debbie Cameron

    19 SEPT

    How to Rescue a Nonprofit Technology Project with Change Management pt 1: with Debbie Cameron

    Change Management Lessons with Debbie Cameron Build Consulting Partner Debbie Cameron and change management expert in a webinar on when you can rescue a nonprofit technology project using change management techniques.  In part 1, Debbie describes the philosophy of change management and how these techniques work in helping the people at your organization understand and adapt to big changes. In part 2, she discusses how to rescue a failed project and some techniques to turn a project around. She also gives a mini-case study and takes audience questions. It is never too late to go back and re-assess where change management best practices can help. Learn how to use change management principles to get more out of your nonprofit technology investments and rescue a tech project that hasn’t succeeded – yet. Do you have a technology tool that is not living up to expectations? In an ideal world, change management would help inform three main phases of technology project implementation: planning, during, and after go-live. Build Consulting curated a three-part video series with Debbie Cameron, change management expert at Build Consulting, walking through the Build philosophy and providing best practices and examples at each stage of nonprofit tech project management. But what if you weren’t present for the entire project? What if you are facing a project that isn’t going well – that you inherited – a technology tool that your organization is paying for but everyone hates – a tool your organization is stuck with … is there still a role for good change management? Is it too late to use change management best practices to rescue these projects? In this new webinar, Debbie shares techniques and tools to help analyze where change management can support implementation after technology change. _______________________________ Start a conversation :) Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/ email Carolyn at cwoodard@communityit.com on LinkedIn Thanks for listening.

    37 min
  4. Google Drive Trick for Nonprofits with Steve Longenecker

    12 SEPT

    Google Drive Trick for Nonprofits with Steve Longenecker

    Do you have important files in your nonprofits’ Google Drive that are associated with their owners’ personal gmail address? Google lets you migrate those files to Shared Drive so your organization never loses access to them.  Google Workspace is fantastically easy for nonprofit start ups to set up and doesn’t take a lot of technical know-how to manage until you grow to a larger staff size.  One of the common issues we run into is ownership of files. In Google world, the creator “owns” the files even when shared or saved on a shared Google Drive, and if that owner leaves the organization – through any number of scenarios – the organization no longer has access to those files.  Depending on how important the files are, that can cause problems! For example, if you are using an outsourced CFO – or if a photographer “shared” files with you – you can lose access.  A while back Google created “Shared Drive” and we recommend moving files from individually shared folders to organizationally owned folders.  In this podcast, Steve shares a Google Drive trick for nonprofits on migrating those files to Shared Drive relatively easily, by making the owner a temporary manager of the new folder.  The takeaways:  Google regards the “owner” of files as the creator. Various options for sharing files may not grant complete access to those files for as long as they are needed. Community IT recommends creating Shared Drive in Google Workspace and migrating individual files and folders there to preserve organization access to them. This changes the “owner” from the individual to the organization. If you are running into migration issues with shared files disappearing, it is probably because the file was “owned” by someone outside your organization, or even someone within your organization using an individual gmail account to access Google. It is very easy to mistakenly log in to Google under other accounts to do your work!To migrate files in that situation, Google makes it possible to solve the ownership problem without a third-party tool. Staying within the Google universe preserves the file formats and makes migration easier. Links remain valid as will dynamic connections within Google Sheets.Community IT recommends creating a Shared Drive and temporarily making those external people managers with their individual gmail account. That gives them the ability to move whole folders of their files into the Shared Drive, where they become “owned” by the organization even after the individual leaves. This also helps clear up files created by external vendors where ownership needs to sit with the organization not with the individual owner, such as photos.It sounds complicated, but Steve walks through how to approach “ownership” in the Google Workspace universe and make data management as easy as possible. _______________________________ Start a conversation :) Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/ email Carolyn at cwoodard@communityit.com on LinkedIn Thanks for listening.

    27 min
  5. How to Nonprofit AI with Brenda Foster pt 2

    5 SEPT

    How to Nonprofit AI with Brenda Foster pt 2

    Vanguard Communications’ Chief of Innovation Brenda Foster shared tips and practical advice on getting started using generative Artificial Intelligence AI tools at your nonprofit in a way that matches your mission and values. Learn how to prompt, when and how to use AI tools, and when not to. Learn how to evaluate the outputs and feel good using AI at your nonprofit. In part 1, Brenda explains the various types of AI and walks through the ethical considerations and trade offs for the environment, community justice, human creativity, privacy and security, and bias. She presents a five question framework for creating your nonprofit AI policy. In part 2, Brenda explores good prompting and the differences between tools in this moment, and takes audience Q&A. Are you wondering where to start with AI? Chances are you and your colleagues are already using it for some things, and wondering how to use it better, or whether you should be using it at all. Your organization may be ambivalent or aghast at AI, have already embraced it, or be unsure where to start. You may have colleagues that are using AI for everything and others who won’t touch it. Brenda Foster is a PRSA-NCC Hall of Fame inductee who has specialized in nonprofit communication for decades.  In this webinar, she shares tips and best practices on improving your AI prompts for communication success and explores situations where AI can improve the day-to-day job satisfaction for nonprofit staff. You can hear more from Brenda in our podcast discussion of AI tips here. How can your nonprofit get started ? In this webinar learn how to prompt, when and how to use AI tools, and when not to. Learn how to evaluate the output and ensure that your team feels confident and comfortable using AI to make their jobs more interesting and to better support your mission. As with all our webinars, this presentation is appropriate for an audience of varied IT experience. Community IT is proudly vendor-agnostic, and our webinars cover a range of topics and discussions. Webinars are never a sales pitch, always a way to share our knowledge with our community. Learn how to create an AI Acceptable Use Policy here. The nonprofit sector is deeply concerned with ethics, accountability, the environment, and systemic change. Learn more about ethical AI frameworks here. _______________________________ Start a conversation :) Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/ email Carolyn at cwoodard@communityit.com on LinkedIn Thanks for listening.

    32 min
  6. How to Nonprofit AI with Brenda Foster pt 1

    29 AUG

    How to Nonprofit AI with Brenda Foster pt 1

    Vanguard Communications’ Chief of Innovation Brenda Foster shared tips and practical advice on getting started using generative Artificial Intelligence AI tools at your nonprofit in a way that matches your mission and values. Learn how to prompt, when and how to use AI tools, and when not to. Learn how to evaluate the outputs and feel good using AI at your nonprofit. In part 1, Brenda explains the various types of AI and walks through the ethical considerations and trade offs for the environment, community justice, human creativity, privacy and security, and bias. She presents a five question framework for creating your nonprofit AI policy. In part 2, Brenda explores good prompting and the differences between tools in this moment, and takes audience Q&A. Are you wondering where to start with AI? Chances are you and your colleagues are already using it for some things, and wondering how to use it better, or whether you should be using it at all. Your organization may be ambivalent or aghast at AI, have already embraced it, or be unsure where to start. You may have colleagues that are using AI for everything and others who won’t touch it. Brenda Foster is a PRSA-NCC Hall of Fame inductee who has specialized in nonprofit communication for decades.  In this webinar, she shares tips and best practices on improving your AI prompts for communication success and explores situations where AI can improve the day-to-day job satisfaction for nonprofit staff. You can hear more from Brenda in our podcast discussion of AI tips here. How can your nonprofit get started ? In this webinar learn how to prompt, when and how to use AI tools, and when not to. Learn how to evaluate the output and ensure that your team feels confident and comfortable using AI to make their jobs more interesting and to better support your mission. As with all our webinars, this presentation is appropriate for an audience of varied IT experience. Community IT is proudly vendor-agnostic, and our webinars cover a range of topics and discussions. Webinars are never a sales pitch, always a way to share our knowledge with our community. Learn how to create an AI Acceptable Use Policy here. The nonprofit sector is deeply concerned with ethics, accountability, the environment, and systemic change. Learn more about ethical AI frameworks here. _______________________________ Start a conversation :) Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/ email Carolyn at cwoodard@communityit.com on LinkedIn Thanks for listening.

    31 min
  7. How to Respond to a Cybersecurity Incident at a Nonprofit with David Dawson

    22 AUG

    How to Respond to a Cybersecurity Incident at a Nonprofit with David Dawson

    Does your nonprofit know what to do when a staff person clicks on a suspicious email and instantly regrets it?  David Dawson is a Senior Engineer at Community IT on the escalation team for our help desk. Recently he led the response to a cybersecurity incident at a nonprofit client. In this Community IT podcast, he answers Carolyn’s questions about the flow of the response, best practices, and gives tips on how your nonprofit can be prepared to respond to phishing or hacking attempts.  Knowing who to call and how to respond to a cybersecurity incident at a nonprofit can be the difference that makes a quick and complete recovery. The takeaways:  When staff know what to do and who to call it saves valuable time and leads to more confidence in your response. Cybersecurity Awareness Training – particularly anti-phishing training – is a crucial part of your nonprofit cybersecurity defense. Having a single point of contact handling the communication at the nonprofit was important both to provide helpful information back to the IT provider quickly and to communicate effectively with 100+ staff that the incident was being resolved and what they needed to do. Of course, if your single point of contact is on vacation it can complicate your response. Having an Incident Response Plan with multiple backups will help guide your response.If you haven’t reviewed your Incident Response Plan recently, you should! Better yet, gather the stakeholders and hold a tabletop exercise to run through some scenarios and see how your team would handle them. This kind of an exercise doesn’t cost anything to run except your stakeholders’ time, and can help identify single points of failure or areas where the plan is good but your staff need training on what is in it.Many nonprofits initially handle their IT management internally. As your nonprofit grows, consider when it becomes appropriate to call on a trusted partner like Community IT to help with cybersecurity, help desk, and strategic planning. Are your cybersecurity investments up to date? What does your cyberliability policy cover? Could you resolve and recover from a cybersecurity attack? _______________________________ Start a conversation :) Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/ email Carolyn at cwoodard@communityit.com on LinkedIn Thanks for listening.

    24 min
  8. Managing AI Risks at Nonprofits with Peter Campbell

    15 AUG

    Managing AI Risks at Nonprofits with Peter Campbell

    Peter Campbell is the principal consultant at Techcafeteria, a micro-consulting firm dedicated to helping nonprofits make more affordable and effective use of technology to support their missions. He recently published a free download powerpoint on Managing AI Risk and had time to talk with Carolyn about his thoughts on developing AI policies with an eye to risk, where the greatest risks lie for nonprofits using AI, and how often to review your policies as the technology changes rapidly. The takeaways:  AI tools are like GPS (which is itself an AI). You are the expert; they are not able to critically analyze their own output even though they can mimic authority. Using AI tools for subjects where you have subject expertise allows you to correct the output. Using AI tools for subjects where you have no knowledge adds risk. Common AI tasks at nonprofits move from low-level risks such as searching your own inbox for an important email to higher-risk activities more prone to consequential errors, such as automation and analysis.Common AI risks include inaccuracy, lack of authenticity, reputational damage, and copyright and privacy violations.AI also has risk factors associated with audience: your personal use probably has pretty low risk that you will be fooled or divulge sensitive information to yourself, but when you use AI to communicate with the public, the risk increases for your nonprofit. How to Manage AI Risks at Nonprofits?  Start with an AI Policy. Review it often as the technology and tools are changing rapidly.Use your own judgement. A good rule of thumb is to use AI tools to create things that you are already knowledgeable about, so that you can easily assess the accuracy of the AI output. Transparency matters. Let people know AI was used and how it was used. Use an “Assisted by AI” disclaimer when appropriate.Require a human third party review before sharing AI created materials with the public. State this in your transparency policy/disclaimers. Be honest about the roles of AI and humans in your nonprofit work.Curate data sources, and always know what your AI is using to create materials or analysis. Guard against bias and harm to communities you care about.“I’ve been helping clients develop Artificial Intelligence (AI) policies lately. AI has lots of innovative uses and every last one of them has some risk associated with it, so I regularly urge my clients to get the policies and training in place before they let staff loose with the tools. Here is a generic version of a powerpoint explaining AI risks and policies for nonprofits. “Peter Campbell, Techcafeteria _______________________________ Start a conversation :) Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/ email Carolyn at cwoodard@communityit.com on LinkedIn Thanks for listening.

    22 min
See All (247)

About

Community IT offers free webinars monthly to promote learning within our nonprofit technology community. Our podcast is appropriate for a varied level of technology expertise. Community IT is vendor-agnostic and our webinars cover a range of topics and discussions. Something on your mind you don’t see covered here? Contact us to suggest a topic! http://www.communityit.com

Information

You Might Also Like