Charities often handle sensitive and personal data.  They have a duty of care to protect the information for those whose data they hold.  And like every other organisation they have to comply with the Data Protection Act.

The fact that many charities have limited resources is no excuse for not protecting this information.

Risk Management for Charities

Under SORP (Accounting and Reporting by Charities - Statement of Recommended Practice) trustees are required to make a statement confirming that "..the major risks to which the charity is exposed, as identified by the trustees, have been reviewed and systems have been established to manage those risks."  This includes risks associated with IT systems and data protection, and these areas should be incorporated into a charities Risk Management Process.

Let PEM IT Services guide you

PEM IT Services works with charities to help them do this, by helping them assess the data they hold and applying appropriate protection based on the sensitivity of the data.  This includes backing up data and storing it securely, putting relevant permissions and safeguards within the IT systems and encrypting sensitive information that is sent from the charity.

Every charity is different, and we work with you to ensure that you have the right systems in place to manage your risks and legal requirements.  To find out more please contact PEM IT Services on 01223 728 205.