The Exposure Review
$3,500
A foundation holds information about people who asked it for help. That record outlives the staff member who collected it, and it is the first thing a compromise would reach.
- Grant correspondence and payment instructions share an unprotected mailbox.
- Trustee access was granted years ago and never reviewed.
- Donor and applicant records sit in accounts tied to one staff member.
