4 Simple Ways to Strengthen Your Organization’s Security Today

At our recent State of Fluxx session, Chris Aurelio, our Director of Security and Compliance, reminded us of an important truth: security isn’t just an IT issue — it’s about protecting trust, operations, and the communities we serve.

The threats facing mission-driven organizations are evolving quickly:

• Ransomware now accounts for one-third of breaches, and attacks can move from initial access to full system lockouts in just hours.
• Human error is behind nearly 70% of breaches — from phishing clicks to weak or reused passwords.
• Stolen credentials play a role in 77% of web app breaches.

But here’s the good news: improving your security posture doesn’t always require big budgets or massive overhauls. A few practical steps, applied consistently, can make a meaningful difference.

1. Review Admin Access

Inactive or shared admin accounts are common security gaps. Remove users who no longer need elevated privileges, and make sure each admin has their own unique login. This reduces unnecessary exposure and improves accountability.

2. Audit User Roles and Permissions

Not everyone needs access to everything. By using role-based access controls and assigning the minimum level of access necessary, you can better protect sensitive data. Review permissions regularly — especially after staff turnover — to keep access current.

3. Enforce Strong Authentication

Passwords alone aren’t enough anymore. Requiring Multi-Factor Authentication (MFA) for all users, especially administrators, adds an extra layer of protection. To take it a step further, enable Single Sign-On (SSO) to reduce password fatigue and limit the risks of weak or reused credentials.

4. Educate Your Team

Technology is only part of the solution. People are your first line of defense. Remind staff to be cautious of phishing emails, especially those impersonating funders or grantees. Just as importantly, make it easy for them to report suspicious activity so your team can respond quickly.

Building Trust Through Security

Security isn’t about perfection — it’s about consistency, awareness, and trust. For grantmakers, this trust is foundational: it ensures uninterrupted grantmaking, protects sensitive data, and strengthens relationships with grantees and funders.

At Fluxx, we’re committed to being not just a technology partner, but a security partner.

If you’re interested in learning more about enabling SSO or exploring ways to strengthen your organization’s security, we’d love to connect.