Full Speed Ahead: Managing Technology Risk
Estimated Reading Time: 2 minutes
By the NRMC Team
Resource Type: Risk eNews
Topic: Data Privacy, Tech Risk, Cybersecurity, HR Risk and Employment Practices
Preventing Employee Misuse of Technology
A nonprofit employer places a great deal of trust in its employees when providing equipment and an electronic connection to the outside world. The survival and viability of your nonprofit may depend on how, and whether, employees uphold that trust, and how well you educate them about your expectations and train them in the proper way to use the equipment. The rule-of-thumb is “Don’t assume.” The codicil is “Don’t deny,” because the Internet and e-mail are very effective and efficient tools for managing the business of your nonprofit when used appropriately. In your zest to reduce the risks associated with Internet use, don’t cavalierly deny employees access to this modern tool.
Every nonprofit can and should take steps to both educate its workforce about its role and responsibility to protect the organization’s technological assets, and the organization’s specific expectations with respect to employee use of equipment and systems. Never assume that employees “know better.” Whether you’re prohibiting visits to pornographic Web sites or restricting the downloading of freeware from the Internet, sound risk management requires that you provide explicit instructions about your expectations at the outset of the employment relationship. Provide reminders about acceptable use from time to time, as appropriate. Update your policies as new technology risks emerge. The admonition “Don’t open an attachment to an e-mail from someone you don’t know” is commonly heard risk management advice today. Like other suggestions contained in Full Speed Ahead: Managing Technology Risk in the Nonprofit World, this advice was born from real world experience — in this case from destructive viruses transmitted through enticing e-mail messages. As with any employment-related policies, the effectiveness of a technology policy is seriously compromised if the organization establishes — but ignores — the policies it adopts.
Risk Management Steps to Guard Against Employee Misuse of Technology
- Provide explicit instructions about the organization’s expectations with respect to employee use of technology.
- Provide periodic reminders about acceptable and unacceptable uses of the organization’s systems.
- Require that employees sign a copy of the organization’s technology or acceptable-use policy and keep a copy of these signed documents in each employee’s personnel file.
- Be aware that new uses of technology may need to be prohibited; thus aspects of your policies may require periodic updating.
- Don’t let the organization’s acceptable-use or technology policy gather dust. Review them frequently and change the policies as needed.
- Apply use restrictions evenly in your organization.
These risk management steps were taken from Full Speed Ahead: Managing Technology Risk in the Nonprofit World, Chapter 2, “Preventing Employee Misuse of Technology,” pages 11-12.
The Nonprofit Risk Management Center welcomes questions and comments at 703.777.3504.
“First let me congratulate you on a conference well done. I had a great time at the Nonprofit Employee Benefits Conference and walked away with some valuable tools and questions that we’ll need to be addressing in both the short and long term. Thanks to you and your staff for all you do to provide us with quality resources in support of our missions.”
— Scott Brown, Mohonk Preserve
“BBYO’s engagement of the Center to conduct a risk assessment was one of the most valuable processes undertaken over the past five years. Numerous programmatic and procedural changes were recommended and have since been implemented. Additionally, dozens (literally) of insurance coverage gaps were identified that would never have been without the work of the Center. This assessment led to a broker bidding process that resulted in BBYO’s selection of a new broker that we have been extremely satisfied with. I unconditionally recommend the Center for their consultative services.
— Sidney Abrams, BBYO
“Melanie Herman has provided expert, insightful, timely and well resourced information to our Executive Team and Board of Directors. Our corporation recently experienced massive growth through merger and the Board has been working to better integrate their expanded set of roles and responsibilities. Melanie presented at our Annual Board of Director’s Retreat and captured the interest of our Board members. As a result of her excellent presentation the Board has engaged in focused review which is having immediate effects on governance.”
— Pamela Mattel, Basics Promesa Systems Inc
“The Nonprofit Risk Management Center has been an outstanding partner for us. They are attentive to our needs, and work hard to successfully meet our requests for information. Being an Affiliate member gave us access to so many time- and money-saving resources that it easily paid for itself! Nonprofit Risk Management Center is truly a valued partner of The Community Foundation of Elkhart County and we are continuously able to optimize staff time with the support given by their team.”
— Jodi Spataro, Community Foundation of Elkhart County
“The board and staff of the Prince George’s Child Resource Center are extremely pleased with the results of the risk assessment conducted by the Nonprofit Risk Management Center. A thorough scan revealed that while we are a well run organization, we had risks that we never imagined. We are grateful to know that we have now minimized our organizational risks and we recommend the Center to other nonprofits.”
— Marti Worshtil, Prince George’s Child Resource Center
Great American Insurance Group’s Specialty Human Services is committed to protecting those who improve your communities. The Center team has committed to delivering dynamic risk management solutions tailored to nonprofit organizations. These organizations have many and varied risk issues, hence the need for specialized coverage and expert knowledge for their protection. We’ve had Melanie speak on several occasions to employees and our agents. She is always on point and delivers such great value. Thank you for the terrific partnership and allowing our nonprofits to focus on their mission!