November 2022 - FundraisingForce

Stephen Mally Charities, Charity, Fundraising, NFP, Non-profit, QR Code

QR codes are here to stay

QR Code

In 2021, I wrote a blog post about QR codes having nine lives. Now, the simple fact is QR codes are here to stay!

Over the past two to three years, we have seen an abundant use of the QR code. Simply put, we survived COVID due to the QR code and the QR code survived because of COVID.

It used to be a rare occasion when a charity would include a QR code as a convenient way for the donor to give a donation. Now, nearly every charity generates an appeal-specific QR code and prints the code on the appeal response device. Over the past few weeks, all but one direct mail piece received from an Australian charity has included a response mechanism that included a QR code. My heart sank when I opened the one appeal lacking the code.

Musts from iConnectx

iConnectx, a US technology provider, wrote a blog that is a nice summary of the use of QR codes and the how-tos. In the blog post, iConnectx suggests things to think through when creating one:

ensure that your website can be accessed on mobile and tablets. Remember QR codes are designed to be used on smart devices such as phones and not on desktops
generate a QR code with the help of a QR code generator. There are several free options available online for generating QR codes. You can also consider paid or subscription versions for greater flexibility. Paid versions offer customisation with your organisation’s brand colours, logo, etc.
integrate data analytics into the code
link the QR code to web pages designed for mobile browsing. Make sure the QR code is linked to the Donate Now or specific appeal page
donors can scan the QR Code from their smartphones. They will be directed to a mobile web browser to view the link in the QR code. Alternatively, they can be sent an SMS or a prompt to dial a number

QR codes can be used in a variety of creative ways. Do not use QR code technology just because it is the “in thing” to do. Ensure QR codes have a purpose within your organisation. More than anything, ensure QR codes have a real benefit to your donor.

Stephen Mally ACNC, Charities, Cybersecurity, Data, Data Security, NFP, Non-profit, Technology

Cybersecurity – not just for our corporate counterparts

Cybersecurity is on the minds of Australians given the recent breaches of AHM, Medibank, and Optus data. In our sector, Blackbaud paid a ransom and faces lawsuits filed by multiple customers due to a data breach in May 2020.

According to a recent article published in UK Fundraising, 1 in 8 charities have been affected by cybercrime in the past 12 months.

How secure is your organisation? A UK Charity Commission survey suggested the most common types of attacks were phishing and impersonation, both of which can put personal data at risk.

The survey conducted by IFF Research in October 2022, showed 2,330 charities in England and Wales underreport incidents with only 34% of affected charities reporting breaches.

Australian Charities and Not-for-Profits Commission (ACNC) White Paper

Every organisation has a duty to ensure cybersecurity. These and other actions can help ensure your organisation is as secure as possible. The Australian Charities and Not-for-Profits Commission (ACNC) published a white paper focused on cybersecurity, which suggests real potential issues for each of our organisations if we do not mitigate risk. Those issues include:

loss of crucial information
disruption to services
unauthorised changes to your charity’s information and systems
expensive costs to restore data and services
costs of notification and investigation (including legal costs)
costs arising from the attack itself (for example, extortion or ransomware)
regulatory action and penalties
loss of trust and reputation

According to the Identify Theft Resource Center, the information exposed in the Blackbaud breach included Social Security numbers, driver’s license numbers, passport numbers, personal health information (PHI), financial information, credit card information, telephone numbers, email addresses, dates of birth, mailing addresses, phone numbers, student I.D. numbers, biographical information, donation dates, donation amounts and other donor profile information. Blackbaud is calling this a security incident.

The Charities Commission in the UK has suggested a stronger use of two-factor authentication, which is something most CRM suppliers are requiring of their customers. Further, the Commission suggests:

updating training and policies
backing up data using cloud services
ensuring the latest version of antivirus and other software is used

The ACNC recommends four steps to prevent cybersecurity:

identify and assess the risks
prevent incidents and mitigate risks
engage people in the charity, and even third parties, to help manage risks
take action when concerns, suspicion or complaints arise

What is your organisation doing to mitigate the risks of a cyberattack? Are your suppliers mitigating similar risks? Your organisation and its suppliers have responsibilities to your supporters. Together you can create a ring around your data and your systems.