Not-for-profit (NFP) organisations hold extremely sensitive data about donors, vulnerable beneficiaries, volunteers, and staff, yet often operate with limited IT resources and expertise.

Not having the right cybersecurity controls in place can lead to financial loss and/or reputational damage; the time it can take to fix a problem is time better spent working on and in your business.

The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has recently released its Annual Cyber Threat Report 2024–2025 which provides insights into the cybersecurity and cybercriminal landscape in Australia. While most organisations are undertaking a range of good activities for Cyber Awareness month the report is a timely reminder of the need to be cyber safe every day of every month.

Many agencies and departments are now addressing the new reporting requirements for the November 2024 update to the Protective Security Policy Framework (PSPF) for the period to 30 June 2025.
The PSPF is the essential guideline for Australian Government agencies to safeguard their information, people, and assets. The update to the PSPF introduced new compliance requirements that aim to strengthen the security posture across various government entities. Previously, entities were reporting maturity, but those days are no longer.