This intermediate‑level session builds on foundational operational security concepts and moves into the practical realities of protecting organizational, staff, and client data in real‑world conditions. Following a brief refresher on key fundamentals, participants will explore how nonprofits can strengthen data protection through clear policies, shared expectations, and everyday operational practices. The session focuses on reducing risk across common scenarios such as device loss or theft, staff transitions, heightened public scrutiny, and routine remote or hybrid work. 

Participants will examine tradeoffs around using personal devices for work. The session highlights how thoughtful rules, checklists, and staff habits can significantly increase security even with limited resources. Attendees will leave with practical strategies to clarify internal expectations, protect sensitive data, and enhance organizational resilience beyond day‑to‑day operations.