Our Cybersecurity Commitment
Protecting our mission, our partners, and our data starts with each of us. Here are the essential practices every team member must follow to keep World Orphans secure.
Your #1 Rule: Use a VPN on Public Networks
A VPN (Virtual Private Network) creates a secure, encrypted “tunnel” for your internet connection. It acts as a private, armored car for our organization’s data when you are on the go.
When is a VPN mandatory?
You must connect to a VPN whenever you access organizational accounts or resources on any public or non-password-protected network (such as coffee shops, airports, or hotels).
Note: If you are connected to a secure, password-protected private network (like your home Wi-Fi), using a VPN is highly recommended but not strictly mandatory.
A Secure Alternative: Your Phone Hotspot
If you find yourself needing to work but are surrounded by unsecure public networks, a great alternative is to tether to your personal phone’s mobile hotspot.
Cellular connections are inherently more secure than open Wi-Fi. While a VPN is still good practice, using your hotspot is significantly safer than connecting to a coffee shop or airport network.
Getting Your VPN
World Orphans does not maintain a central corporate VPN. Instead, you are empowered to choose and purchase your own commercial VPN subscription. Please purchase this using your WO corporate credit card or submit an expense report for reimbursement.
Recommended Providers:
Your Security Shield: 2FA
2-Factor Authentication (2FA) is a second layer of security beyond just your password. Even if someone steals your password, they won’t be able to log in without your second “factor” (usually a code from your phone).
- What it is: Something you know (your password) + something you have (your phone).
- Why it matters: It blocks 99.9% of automated cyber-attacks.
- Your Action: Ensure 2FA is enabled on all World Orphans accounts that offer it (especially email).
Spot the Scams: Phishing
Phishing is when an attacker sends a fraudulent message (email, text, etc.) designed to trick you into revealing sensitive information or downloading malware. They often impersonate people or services you trust.
Red Flags to Watch For:
-
!
Urgent or Threatening Language: “Your account will be suspended,” “Immediate action required.”
-
!
Suspicious Senders: The email address looks “off” (e.g., `microsft.support@gmail.com`).
-
!
Unusual Links or Attachments: Hover over links to see the real destination. Never open attachments you didn’t expect.
-
!
Requests for Credentials: We will never ask for your password via email.
When in doubt, don’t click!
Forward any suspicious emails to our IT support team immediately and then delete the email.
Cybersecurity Best Practices
A secure organization is built on good habits.
-
1.
Create Strong Passwords: Use a password manager to generate and store long, unique passwords for every account.
-
2.
Keep Software Updated: Always install updates for your computer, phone, and applications. These updates often patch security holes.
-
3.
Lock Your Screen: Always lock your computer (Win + L or Cmd + Q) when you step away, even at home.
-
4.
Be Wary of Public Wi-Fi: Avoid using public Wi-Fi (cafes, airports) without your VPN turned on.
-
5.
Report Incidents: If you click a bad link or notice anything strange, report it immediately. Speed is critical.