--- title: Nonprofit Cybersecurity Cheat Sheet description: Nonprofit Cybersecurity Cheat Sheet image: https://blog.techboston.com/hubfs/cloud-computing-1.jpg --- ### Search engine Use this form to find things you need on this site Search × [![We're better together.](https://blog.techboston.com/hubfs/Tech_Networks_of_Boston_June2018/Images/Logo_without_motto-copy-web.png)](https://techboston.com) - [About TNB](https://techboston.com/about-tnb/) - [Overview](https://techboston.com/about-tnb/) - [Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Blog](https://techboston.com/about-tnb/blog/) - [Free Resources](https://techboston.com/about-tnb/resources/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Services](https://techboston.com/our-services/services-overview/) - [Overview](https://techboston.com/our-services/services-overview/) - [Integrated Services](https://techboston.com/our-services/integrated/) - [Managed Services](https://techboston.com/our-services/managed-services-2/) - [Project Services](https://techboston.com/our-services/project-services/) - [Case Studies](https://techboston.com/case-studies/) - [Using IT to Increase Productivity and Reduce Costs](https://techboston.com/case-studies/increase-productivity/) - [Updating Technology for Growing Needs](https://techboston.com/case-studies/updating-technology/) - [Shifting to Remote Work in the Midst of a Crisis](https://techboston.com/case-studies/remote-work/) - [Protecting Your Organization in the Wake of Cybercrime](https://techboston.com/case-studies/cybercrime/) - [Integrating Technology for Mission Driven Success](https://techboston.com/case-studies/integrated-technology-success/) - [Events](https://techboston.com/events/) - [Upcoming Events](https://techboston.com/events/) - [Past Roundtable Events](https://techboston.com/past-roundtable-events/) - [TNB’s Dialogue Series on Nonprofit Data and Evaluation](https://techboston.com/about-tnb/blog/best-practices-data-evaluation/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) - [Home](https://techboston.com/) - [About Us](https://techboston.com/about-tnb/) - [2022 Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Blog](https://techboston.com/about-tnb/blog/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Case Studies](https://techboston.com/about-tnb/case-studies/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Events](https://techboston.com/events/) - [Services](https://techboston.com/our-services/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) # Nonprofit Cybersecurity Cheat Sheet [Home](https://techboston.com) / Nonprofit Cybersecurity Cheat Sheet Return to Previous Page [![image-1](https://blog.techboston.com/hubfs/cloud-computing-1.jpg)](https://blog.techboston.com/hubfs/cloud-computing-1.jpg) [View large](https://blog.techboston.com/hubfs/cloud-computing-1.jpg) [Tech Tips](https://blog.techboston.com/tag/tech-tips) ### Nonprofit Cybersecurity Cheat Sheet *Ransomware…Spoofing…Spear-Phishing….* With [cybersecurity](https://blog.techboston.com/8-it-security-tips-you-need-to-know) in the headlines every day, it’s important to know what the terms mean to better educate yourself and your users. We’ve made a cheat sheet of cybersecurity jargon that you need to know. **Authentication:** A process, such as a login and password combination, used to identify a user, process, or device prior to granting access to a system. Two-factor authentication is a verification process using several elements or stages, such as a verification code sent to an email or phone number in addition to a login and password. **Bring your own device (BYOD)**: The authorized use of personally owned mobile devices such as smartphones or tablets in the workplace. **Brute force attack:** The attempt to gain access to a network using repeated guesses at passwords or Data Encryption Standard keys. **Business Continuity Management:** Preparing for and maintaining continued business operations following disruption or crisis. **Business Continuity Plan:** The process of creating systems of prevention and recovery to deal with potential threats to a company. **Clickjacking:** An exploit in which malicious coding is hidden beneath apparently legitimate buttons or other clickable content on a website. **Cryptolocker:** A Trojan ransomware that encrypts files on an affected system and demands ransom for recovering the data back. It first appeared on the Internet in 2013 and was targeted at Windows-based computers. **Cybersecurity**: Broad term referring to the practice of keeping computers and electronic information safe and secure. **Denial of Service attack (DoS):** A security event that occurs when an attacker takes action that prevents legitimate users from accessing targeted computer systems, devices or other network resources. **Digital forensics:** The process of uncovering and interpreting electronic data. **Disaster recovery:** Involves a set of policies, procedures and tools to enable the recovery or continuation of vital technology infrastructure and systems following a natural or human-induced disaster. **Encryption:** Encryption prevents unauthorized access to your data, from emails to bank details, by keeping communication secure between the parties involved. Encryption is available through software, but most computer systems are already set up to encrypt all of your data. **Endpoint Security:** In network security, endpoint security refers to the methodology of protecting the corporate network when accessed via remote devices such as laptops or other wireless and mobile devices. Each device with a remote connecting to the network creates a potential entry point for security threats. **Exploit:** A piece of code that uses software vulnerabilities to access information on your PC or install malware. **Firewall:** Monitors and controls the incoming and outgoing traffic based on predetermined security rules.  Establishes a barrier between a trusted, secure internal network and untrusted networks (e.g. internet). **IT Security Assessment:** An explicit study to locate IT security vulnerabilities and risks. **Malware:** Short for "malicious software," is any program or file embedded into a system to run an unauthorized process for the purposes of capturing information, sabotaging the system, holding it for ransom, or other negative actions. **Phishing:** A social engineering method to try to trick a user into providing sensitive information. An example of this would be a **spoofed** email message, which appears to come from a legitimate IP address belonging to a bank or major Internet site. The email requests the target enter their login and password or financial information. **Spear phishing** is the same type of approach, but with information targeting a specific individual or organization. **Ransomware:** A type of malicious software designed to block access to a computer system until a sum of money is paid. **Social Engineering: **The art of manipulating people so they give up confidential information, whether it be passwords, bank information, or access to your computer to install malicious software. **Spoofing:** Sending an email disguised to look like it is coming from someplace besides its actual origin. The IP address may be changed, the email address may mimic a known domain, and the email formatting may imitate the design attached to a well-known company or site. **Spyware:** **Malware** that passes information about a computer user’s activities to an external party. **Virus**: **Malware** that is loaded onto a computer and then run without the user’s knowledge or knowledge of its full effects. **Watering hole:** A specific website that attackers have identified as being frequently visited by their intended target. The attacker places malicious links to malware on the site in the hope that the target will be infected when they go there. **Zero day:** A software exploit that hasn’t been disclosed or patched by the software vendor. If you are concerned with any of these security issues, please contact us -- we can cost-effectively improve your organization’s IT security with an IT [Security Assessment](https://techboston.com/our-services/security-assessment-2/), [Phishing Testing](https://techboston.com/free-phishing-test-2/), and [Security Awareness Training](https://techboston.com/our-services/phishing-testing/). Share Post - - - - - [mailto:?body=https://blog.techboston.com/nonprofit-cybersecurity-cheat-sheet](mailto:?body=https://blog.techboston.com/nonprofit-cybersecurity-cheat-sheet) [Previous](https://blog.techboston.com/5-tips-project-planning-success) [![](https://blog.techboston.com/hubfs/5tips%20for%20projects.png) 5 Tips for Successful Technology Projects](https://blog.techboston.com/5-tips-project-planning-success) [Next](https://blog.techboston.com/bringing-b-game-mass-companies-arent-focused-profit-alone) [Bringing our B game: Some MA companies aren’t focused on profit alone](https://blog.techboston.com/bringing-b-game-mass-companies-arent-focused-profit-alone) #### RELATED POSTS Tech Tips [![Training Your Staff on New Tools](https://blog.techboston.com/hs-fs/hubfs/training%20your%20staff.png?width=387&name=training%20your%20staff.png)](https://blog.techboston.com/training-your-staff-on-new-tools) #### Training Your Staff on New Tools July 28, 2022 at 10:26 AM by Veronica Moreno-Nestojko … Tech Tips , IT security [![The Benefits of 24/7 Monitoring and Reporting](https://blog.techboston.com/hs-fs/hubfs/24_7%20monitoring.png?width=387&name=24_7%20monitoring.png)](https://blog.techboston.com/the-benefits-of-24/7-monitoring-and-reporting) #### The Benefits of 24/7 Monitoring and Reporting February 18, 2021 at 04:23 PM by Veronica Moreno-Nestojko … Tech Tips , Uncategorized #### 4 ways your small business can embrace innovation June 12, 2019 at 11:20 AM by Ashley Fontes … Tech Tips , Security awareness [![How Your Nonprofit Can Manage Data Breaches and Minimize Risk](https://blog.techboston.com/hs-fs/hubfs/CyberSecurity.png?width=387&name=CyberSecurity.png)](https://blog.techboston.com/how-your-nonprofit-can-manage-data-breaches-and-minimize-risk) #### How Your Nonprofit Can Manage Data Breaches and Minimize Risk May 17, 2019 at 06:37 PM by Veronica Moreno-Nestojko … ### Leave a Reply [![updatedblogad](https://blog.techboston.com/hs-fs/hubfs/updatedblogad.png?width=312&name=updatedblogad.png)](https://techboston.com/about-tnb/contact-us/)                    ### Contact Us 1 Wadleigh Place South Boston, MA 02127 Phone: 617.269.0299 Fax: 888.527.9333 ### GET UPDATES ### Resources [Server Failure and Recovery](https://techboston.com/resources/server-failure/) [Plan a Successful Email Migration to the Cloud](https://techboston.com/resources/email-migration/) [How to Align Your Staff on Technology Use and Policies](https://techboston.com/resources/technology-policies/) [Data Loss and Recovery: A Guide](https://techboston.com/resources/data-loss-recovery/) [Assess Your IT Needs: Is an MSP Right For You?](https://techboston.com/resources/assess-it/) [IT Audits and Assessments: What Are They Good For?](https://techboston.com/resources/it-audits-assessments/) [The Right Time to Change Your MSP](https://techboston.com/resources/change-msp/) [Privacy Policy](https://techboston.com/privacy-policy/) © 2021 Tech Networks of Boston