As the risk of cyber-attacks is ever growing, Oxfordshire Community Foundation (OCF) has continued to invest in a number of proactive measures to ensure our systems, security and staff are well-placed to strengthen our defences.
Across the world, organisations of every size are facing an increasingly complex cyber security landscape. Alongside recent high profile cyber-attacks in the UK, global reports show that cyber-attacks continue to grow and these trends underline the importance of vigilance. Whilst OCF has never had a cyber-attack, our prudent approach is ensuring that cyber security remains a central pillar of good governance for OCF. Donors and grantees alike place great trust in us to safeguard the funds that have been contributed to us with the purpose of supporting grassroots charities to thrive.
Our commitment to cyber security
At OCF, protecting our systems, finances, data and our donors is a top priority. Over the past year, we have continued to strengthen our cyber security through a range of proactive measures designed to minimise risk and enhance resilience.
1. Cyber Essentials certification: We have achieved certification through the National Cyber Security Centre’s Cyber Essentials scheme, this government accreditation is a widely recognised UK standard that demonstrates strong cyber hygiene and protection against the most common cyber threats. This certification offers donors reassurance that we have appropriate defence measures in place.
2. Professional IT security support: Working with our trusted external IT partner, we benefit from expert support that includes:
- Management and maintenance of our core firewall
- Daily system backups and recovery processes
- Password‑security best practices
- Ongoing staff cyber‑awareness training
- AI‑powered threat detection to identify and block malware, ransomware and cloud‑based attacks
These measures ensure our systems are continuously monitored using the latest technologies.
3. Cyber insurance: This year we introduced dedicated cyber insurance, adding an extra layer of protection. Importantly, our insurer uses proactive threat‑monitoring tools to help detect and mitigate risks early – an essential safeguard in the digital environment.
4. Strengthening our human defences: Cyber security is not only about technology. People play a vital role. That’s why we delivered a simulated cyber‑attack workshop involving both staff and trustees. This practical training helps ensure the entire organisation understands how to identify suspicious activity and how to respond quickly and effectively.
5. Multi‑factor authentication (MFA): We have implemented MFA on our CRM system to significantly reduce the risk of unauthorised access.
6. Improved onboarding and induction: To ensure long‑term resilience, we are developing a dedicated IT and cyber security onboarding pack for all new staff, trustees and volunteers. This will provide clear guidance on safe, secure and appropriate use of our systems from day one.
OCF remains fully committed to protecting the funds and personal data entrusted to us. Our enhanced systems and ongoing investment in cyber security ensure we are well‑prepared to manage risks responsibly and confidently.
Your trust enables us to continue making a positive difference across Oxfordshire, and we take that trust extremely seriously. Cyber security will remain a key focus for us in the months and years ahead.