Charity / trustee
You hold sensitive information about people who are often vulnerable, usually on a modest budget and older equipment, and you are seen as a soft target. Trustees carry real responsibility here, including in law. Little of the remedy costs money; most of it is attention.
Your priorities, in order
Phishing emails
CriticalA fake message that persuades you to click, sign in or pay.
Scams & deceptionSee what to doBusiness email compromise (BEC)
CriticalA criminal poses as your boss or a supplier to have money sent to them.
Scams & deceptionSee what to doInvoice & bank-detail fraud
HighA convincing invoice carrying the criminal’s bank details.
Scams & deceptionSee what to doRansomware
CriticalYour files locked and scrambled until you pay - perhaps.
Running a website or small orgSee what to doData leakage & oversharing
MediumSensitive information slipping out through everyday mistakes.
Running a website or small orgSee what to doWeak & reused passwords
CriticalOne password, used everywhere - the attacker’s master key.
Protecting your accountsSee what to doLost or stolen devices
HighA laptop or phone goes missing - with everything on it.
Your devices, car & homeSee what to doThird-party / vendor breach
HighYour data exposed because a supplier was breached.
Running a website or small orgSee what to doInsider threat
HighHarm from someone on the inside - careless or deliberate.
Running a website or small orgSee what to doSpear-phishing
CriticalPhishing written for you alone, using details that make it ring true.
Scams & deceptionSee what to do