Cyber Security: The Basics

In this session, Patrick Burgess of Nutbourne explores cyber security fundamentals for charities and not-for-profits and why it’s now a question of “when,” not “if.”

The session challenges three common assumptions: that an attack won’t happen to you, that your data isn’t worth stealing, and that security only gets in the way. You’ll see why each underestimates the real risk, given that donor details, beneficiary records, payment systems, and grant data all carry value, often guarded by lean teams with limited defences.

Drawing on current figures most small organisations have faced a breach, many struggle to recover within six months, and around a third have met regulatory consequences under GDPR and Charity Commission rules the focus stays on preparation rather than alarm. You’ll learn how to prioritise with limited resources by identifying critical assets, building an information asset register, and concentrating on the highest-impact actions. The session closes with practical support, including NCSC tools and the role of a trusted IT partner, helping you benchmark where your organisation stands today and build a realistic roadmap to strengthen your defences and protect your mission.

Key learnings for this session:

• Change the mindset
• Know what matters
• The five non-negotiables
• Use available resources that can help close gaps.