Home / Sectors / Charities Charities and not-for-profits

Cyber security for charities

Charities hold sensitive data about donors, volunteers and the people they support, often with small teams and tight budgets. We help you protect it, reassure funders and meet your trustees' duties.

Book a free callHow we help
Sound familiar?

What charities usually call us about

Trustees are responsible for cyber risk

The Charity Commission expects trustees to manage risks to the charity, including cyber crime. Serious incidents such as fraud or data breaches may need reporting to the Commission.

Funders and partners ask for Cyber Essentials

Grant makers, public sector commissioners and corporate partners increasingly ask for Cyber Essentials as proof you protect the data they share with you.

Donor and beneficiary data

Supporters, volunteers and service users trust you with personal and sometimes highly sensitive information. A breach can damage that trust and your fundraising.

Fraud and phishing

Charities are targeted by fake invoices, payment diversion and phishing aimed at staff and volunteers who often use their own devices.

Cyber Care Initiative

Giving back to the community

Whenever a recommendation brings us a new customer, we donate to organisations that help educate, protect and support people affected by cybercrime.

About the Cyber Care Initiative

Why it matters

Every year thousands of individuals, families, schools and charities are affected by phishing, identity theft and online fraud. 100% of referral donations go directly to charities supporting cybercrime prevention, online safety education and victims of digital crime.

How we help

The services that help most

Cyber Essentials

The UK government-backed baseline, with a review before you submit.

Find out more →

Phishing Simulation & Awareness Training

Realistic phishing tests and short training that change behaviour.

Find out more →

Microsoft 365 Security Audit

A configuration review of your tenant with a prioritised fix list.

Find out more →

Microsoft 365 MDR

Risky sign-ins, mailbox rules and token theft, watched around the clock.

Find out more →

Incident Response Planning

A written, tested plan for when something goes wrong.

Find out more →

Vulnerability Scanning & Remediation

Continuous scanning, prioritised fixes and verified closure.

Find out more →
Questions

Charities FAQs

We're a small charity with no IT team. Can you help?
Yes. We explain everything in plain English and guide you through each step. If an IT company or volunteer supports you, we work alongside them. See how we work with you.
Do volunteers' own devices count for Cyber Essentials?
If volunteers use their own laptops or phones to access your email or data, those devices are normally in scope. We help you decide what's in scope and how to manage it.
Is cyber insurance included with Cyber Essentials?
UK-based organisations, including charities, with a turnover under £20 million that certify their whole organisation can opt in to £25,000 of cyber liability insurance at no extra cost for 12 months.
What should we do if we're attacked?
Call our 24x7 emergency incident response line on 01223 921 300. We'll help you contain the incident and work out who you need to tell, such as the ICO, Action Fraud or the Charity Commission.
Let's Talk Security

Protect the people who support your cause

Talk to one of our team, who will be happy to talk through your requirements and work with you to protect your organisation.

Book a free callCall 01223 921 300