The donor CRM as the number one attack target in an NGO
The CRM system storing donor data is a nonprofit’s most valuable digital asset. It contains names, addresses, phone numbers, email addresses, donation histories, and often credit card or bank account numbers. A breach of this data means not only a GDPR violation with potential fines, but above all a loss of donor trust that can threaten the organization’s very existence.
CRM access control — the principle of least privilege
The fundamental principle is: every user should access only the data necessary for their tasks. Implement CRM roles: administrator (1-2 people), full access (managers), read-only access (staff), limited access (volunteers). Disable data export for everyone except administrators. Every CRM access should require multi-factor authentication. Regularly review the user list and remove accounts of inactive staff and volunteers.
CRM data encryption and backups
Donor data should be encrypted both at rest and in transit. Most cloud CRM platforms ensure transport encryption (HTTPS/TLS), but verify server-side data encryption as well. CRM backups should be performed daily, encrypted, and stored in a separate location. Test backup restoration quarterly. For particularly sensitive data (card numbers, bank accounts), consider removing them from the CRM after transaction processing — do not store data you do not need.
Cybersecurity for Your Industry
Learn more about cybersecurity in your industry:
Why this matters for organizations
The donor CRM is the most valuable IT system in a nonprofit. Learn how to protect donor data from breaches and unauthorized access. In the context of growing cyber threats and tightening regulations (NIS2, DORA), organizations must proactively manage this security area. Failure to implement adequate safeguards can lead to data breaches, financial penalties, and reputational damage.
Best practices for implementation
Effective implementation requires several key steps:
- Risk assessment and inventory — identify assets, threats, and vulnerabilities specific to your organization.
- Policy development — document requirements, roles, and responsibilities.
- Technical controls — deploy tools and configurations proportionate to identified risks.
- Training and awareness — engage employees in protecting organizational security.
- Monitoring and continuous improvement — regularly verify effectiveness and adapt to the evolving threat landscape.
Related terms
Our services
Related services and products
- OpenText Fortify Software Composition Analysis
- OpenText Fortify Software Security Center
- OpenText Fortify Static Code Analyzer
Frequently asked questions
Which CRM is most secure for nonprofits?
Salesforce for Nonprofits offers advanced security features (encryption, audit trail, IP whitelisting) and is available free to qualifying organizations. CiviCRM gives full control over data but requires self-managed server security.
Should volunteers have access to the donor CRM?
Only if essential for their tasks, and only with minimum scope. Use roles and views to restrict data to the minimum.
What to do after detecting unauthorized CRM access?
Immediately lock the compromised account, reset all user passwords, review access logs, and assess the breach scope. If personal data was leaked, report the breach to the supervisory authority within 72 hours and notify affected donors.
