techcafeteria

Techcafeteria Blog

Regime Change

I’ve been pretty fascinated by the news reports about how the Obama staff reacted to the technology in place at the White House. If you haven’t been tracking this, you can read the full story, but the short story is this: the Mac/Blackberry/Facebook-savvy Obama staffers were shocked to find ancient systems and technology in use at the White House – Windows XP, MS Office 2003, traditional phone lines, and web filtering in place – in other words, the same stuff my org uses. I found myself both sympathetic and skeptical regarding their plight, because I am a big fan of all of the new technology that they are familiar with, but they walked into a network that is a lot like 90% of the businesses out there. The Bush Administration, perhaps surprisingly, was fairly current in their use of technology.

Some quick things I draw from this:

  • The Obama campaign distinguished themselves by their smart use of modern, internet technology, and that use played a major role in their successful campaign.
  • The shock they’re facing is less about the technology in place than it is about the culture they’re moving into. Political teams run freely and nimbly, and Howard Dean established the Web as the infrastructure of choice in 2004. Businesses, like the White House, do not drive so close to the cutting edge, for a variety of good reasons, such as the need for standardization and security.
  • Over the next few months, the Obama-ans are going to compromise, and I’m dying to learn what choices they’ll make.

In my work, I’m on both sides of that fence every day, working with staff to understand why we have to standardize in order to manage our systems, stay a little behind the curve in order to avoid risk, and stick with applications like Microsoft Office because they have the mature feature set that we require. At the same time, I rally my staff to be creative in finding tools and solutions for our people, to stay abreast of which new tools are going to be worth the risk in terms of the benefits they offer, and understand that, should we get too far behind, it will be as risky as being too far out on the technological edge. We don’t want to fall off of any cliffs, nor do we want to stand still as all of the other cars race around us.

Some of us, like the leader of the free world, can’t imagine a day without a Blackberry; others, like a former free world leader, don’t even want an email account. Most of us live in this world where we have to creatively embrace the new while we tighten our grips on the traditional, because technology platforms thrive on stability while they obsolesce rapidly. Where the Obama White House winds up might be a good indicator of where we should all be. I hope we’ll have a window into that.

Share

The Death of Email (is being prematurely reported)

Friends of mine who are active on social media sites like Facebook and Twitter are fond of proclaiming that email is dead. And, certainly, those of us who are active on these networks send less email to each other than we used to. I’m much more likely to direct message, tweet, or write on someone’s wall if I have a quick question, comment or information referral for someone, the latter two if it’s a question or info that I might benefit from having other people in my online community see.

But I don’t see these alternatives as ships carrying the grim reaper onto email’s shores—I think they’re more likely the saviors of email. As I said a couple of weeks ago in my “Myth of KISS” post, email applications are heavily abused, and they’re not very good at managing large amounts of information. This hasn’t stopped a good 90% of the people online from using email as their primary information aggregator. We get:

  • Personal emails

  • Mailing List items

  • ENewsletters

  • Automated alerts

  • Spam!

  • and a host of other things

in our email inboxes every day. The inbox places new messages on top and older messages scroll down and out of sight. Almost every email program on earth lets you, as you make time for it, pull emails into named folders, mark them as important, order them by name or date or subject, search for them, and archive them to some other part of your storage space, but none of them do more than some basic filtering and prioritizing for you, perhaps IDing 90% of the spam and, if you’re a power user, allowing you to place messages from certain people in special folders.

The exception to the standard email processing rules is Google’s GMail, which does innovative threading and labeling, allowing for, in my opinion, a superior tool for information management, but it’s still a lot of work. The tools will improve, but it’s kind of like hiring a better maid service to clean up congress – they’ll make the halls shinier, but the same legislators will show up for work on the next day.

The answer is to acknowledge that email applications, as we know them, were never meant to process upwards of twenty or thirty messages a day. The information management defaults assume a manageable number of items, and many of us are way past that threshold. The power of alternative messaging mediums is that they are tailored to the types of messages they deliver, and their tools sets are accordingly more refined and targeted. If you get newsletters and alerts in your email, switch to RSS. If you do a lot of short messages or work coordination, look at IM. If you announce or broadcast information, or survey your contacts, use Twitter or Facebook. These mediums are, so far, much less susceptible to spam, and you can ignore messages once you’ve read them or skipped them, they don’t have to be deleted. The closer you get to only receiving personal email in your inbox, the easier it will be to keep up with it

So these new mediums aren’t gunning to eliminate our old, old electronic friend – they’re just allowing it to go on a long overdue diet.

Share

Help for the Helpers

If you’re in a job that involves supporting technology in any fashion, from web designer to CIO, then the odds are that you do help desk. Formally or not, people come to you with the questions, the “how do I attach a file to my email?”, the “what can I do? My screen is frozen”, the “I saved my document but I don’t know where”. Rank doesn’t spare you; openly admitting that you can do anything well with computers is equivalent to lifetime membership in the tech support club.

A full time tech support job is, for the most part, an extended roller coaster ride with more down slopes than up. People who are drawn to this work are generally sharp, eager to assist, and take pride in their ability to debug. The down side is that, day after day, it’s grueling. There’s always a percentage of people who would just as soon smash the machine and go back to their trusty Selectrics. They aren’t always happy or polite with the friendly tech who comes to help them.

But the most debilitating aspect of the work is that support techs don’t manage their workload. It’s randomly and recklessly assigned by the varying needs of their co-workers and the stability of their systems. They never know when they’re going to walk in the office to find the donor database is crashed, or the internet line is down. The emails come in, the phone rings, and, to the people calling, everything is a crisis. Or it certainly seems that way. The end result is that career support techs often develop a sense of powerlessness in their work, and the longer it goes on, the less able they are to take proactive action and control of their jobs.

So here are two complimentary actions that can be taken to brighten the life and lighten the load of the support tech.

1. Deploy a trouble ticket system. And make sure that it meets these specifications:

  • Incredibly easy for staff to use. Web-based, linked from their desktop, with, ideally, three fields: Name, priority and problem. The software has to be able to grab additional information automatically, such as the time that the ticket was submitted, and, optimally, the user’s department, location and title, but the key point is that people won’t use the system if the system is too annoying to use.

  • Every update is automatically emailed to the user and the tech. This is critical. What an automated trouble ticket does best is to inform the customer that their issues are being addressed. Without this communication in place, what stands out in user’s minds are the tickets that haven’t been resolved. Confirmations of the fixes, sent as they occur, validate the high rate of responsiveness that most help desks maintain.

  • Be clear that the scope of the problem will influence the response time. Fixes that require spending or input from multiple parties are not slam dunks. This communication might warrant additional checkboxes on the submission form for “requires budget” or “requires additional approvals”, but formalizing this information helps the customer know that their issue hasn’t just been dropped by the tech.

  • Have a default technical staff view that puts open tickets on top. In environments where the telephone is the primary support funnel, things get forgotten, no matter how good and organized the tech is.

There’s more to it – good ticket systems feed into, and include links to additional support resources. And they don’t replace the telephone – IT has to be readily available. But there should be an understanding that users follow up phone calls with tickets. These are the key strategies that help the seemingly unmanageable stream of support calls fall in line.

2. Allow the support staff to breathe. There has to be an understanding, primarily understood by the support tech, but reinforced by his or her manager, teammates and staff, that only emergencies demand emergency response times. In fact, treating every call as an equally important, must be fixed immediately situation is a strategy for failure. Support Techs need to do effective triage, and put aside time to analyze and act proactively to solve user problems. If they deal with the same questions over and over, they have to write and publish the solutions. If the calls indicate a common problem that can be solved with a better application or an upgrade, they need to be able to step back and assess that. Smart managers will enforce this measured approach. At first, it will go against the grain of service-oriented staff, but it’s a must, because the measured response begets the more comprehensive solution to any problem.

Share

The Myth of KISS

Keep It Simple, Someone*! If there ever was a common man’s rallying plea relative to technology, this is the one. How many people do you know who got an iPod for XMas, only to learn that, before they could use it, they would have to learn how to rip their CD collection to disk? And upgrade the hard drive, or buy additional storage? All of which is a piece of cake, when compared to setting up a wireless network or removing persistent spyware. The most frequent request that I get from the people I support as an IT Director? “I just want it to turn on and work!”. I can relate. Which is why I’m here to tell you that keeping it simple can be a questionable goal, at best.

The fact is, it’s not easy to manage even a home computer. It’s gotten better: they’re nice enough to color code the audio ports on a new PC, and put little labels below the connectors, and more and more things connect over USB, making the “where do I plug it in?” question a little easier to answer. And, wow, they even put a few ports on the front now. But we’re a long way from the day when operating a computer is as easy as operating a toaster, and I, for one, question whether that will be a happy day.

My biggest case in point is email. Email is the application that everyone in the family knows and uses. It’s compelling. Even the most technology-averse people can’t escape the argument that communicating with family, friends and associates electronically is inexpensive and convenient. But the problem I see is that, once most people learn email, they don’t want to learn anything else. Want online community? Sign me up for the email mailing list. Want news headlines and informational updates? Send it in the email. The problem with this is that email is an astonishingly useful application, but there’s a point where it breaks down, and that point is when the volume of email becomes greater than the capacity to keep up with it. Email has a huge flaw as an information management tool: important things scroll out of sight. It’s a FIFO medium (First In, First Out), that doesn’t prioritize information for you, so that message from Aunt Irma supercedes the spam from the travel agency which supercedes the alert that your home is in foreclosure which supercedes the announcement that dog food is on sale… you get my point. And managing the email, staying on top of it and storing it in folders is a job.

So I advocate for making an early investment that pays off later—learn a few more applications. Read RSS feeds in an RSS reader; visit your major social networks and online communities at their web sites; eschew the mailing lists—or subscribe using an alternate email account that you follow with another application. Do some research before investing in any application or gadget—there’s a powerful argument that digitizing your music will save you time and effort in the long run, but that’s of little use if, as happened with a friend of mine, you buy the iPod the day before you’re shipped out to an island on military duty, with no chance to get any music on it. Keep It Separated, Sally, and Knowledge Informs Strategy, Sam. Because the idea that funneling all of that information through one conduit is somehow simpler than doing some up front research, management, prioritization and segmentation of information is a self-defeating myth.

  • Substitute your favorite subjective noun starting with the letter “S”.
Share

Keys to the Kingdom

Being a career nonprofit IT type, I’ve repeatedly had the unpleasant experience of walking into a new job, only to find that critical information, such as software licenses and server passwords, are nowhere to be found. So before I can start to manage a new network, I have to hack it. This sort of thing happens in other industries as well, but it strikes me as something that plagues nonprofits. On one extreme, we might have staff who become bitter and malicious as they depart, destroying records and withholding passwords. But even if the situation isn’t that dramatic, keeping track of sensitive, critical data is a bit tedious, and concerns about security and confidentiality make it additionally complex. Protecting and keeping this information available to the staff that need it can save a lot of time, money and frustration. Here are some suggestions:

Follow procedures: in tight budget and staffing conditions, the approach to IT management is often reactive and chaotic. Many key NPO IT Managers came into the role as “accidental techies”, which implies that many nonprofits only support technology by accident. In an environment where the Office Manager, Donations Clerk or a volunteer ends up deploying the servers and installing applications, it’s a safe assumption that there aren’t well-crafted IT policies in place. In this environment, losing critical passwords—or even failing to ever write them down—can be a regular occurrence.

Involve all stakeholders:Don’t assume that your It staff – who are already struggling to juggle the big projects with user support—are keeping good records. Audit them, assist them and back them up. Finance can take a role in tracking license keys along with purchase records. And far too many nonprofit executives don’t even ask for the system passwords. There is no good reason – no matter how many a tech might come up with – why the CEO or head of security shouldn’t keep an updated, sealed envelope with key passwords in the safe in case of sudden turnover or emergency. I’ve worked with a lot of techies who would scream about this. “The CEO can’t have the password! They’ll delete files! They’ll mess it all up!” Well, the CEO shouldn’t use the password. But they should definitely have it.

Foster a culture that allows technology staff to succeed: in two of my personal cases, the staff before me had left en masse and bitterly. They took the main network password with them and wiped out a lot of the IT records. Clearly, this is immature and unprofessional behavior. I wouldn’t think to defend it. But the circumstances that lead some immature techs to be resentful and abusive can be fostered by certain work conditions. If you are a nonprofit executive, there are some things that you can do to create an environment that is less conducive to bitterness and abuse.

  • Have realistic expectations for IT. If you don’t know how easy or hard it is to, say, upgrade a server or roll out a CRM system, don’t make assumptions. Hire a consultant, get a sense of what’s required, and adjust your expectations accordingly.

  • Participate. Have all staff participate in technology planning and adoption. There are people who install systems and there are people who use them. The installation has to be a joint process. Techs can not be held accountable for determining user’s needs, and users can not be solely responsible for evaluating technology. Whenever IT buys the system without user input, or users pick a system without technical oversight, the relationship between IT and staff becomes strained. Joint responsibility and accountability for system choices is required for a healthy environment.

  • Be appreciative. Tech support can be a very thankless job, and the smaller the staff and budget, the less rewarding. When your computer stalls or malfunctions, it can be frustrating. Even if you, personally, don’t take that frustration out on the tech who comes to fix it, are the rest of your co-workers that patient?

  • Don’t hire extremes. When hiring technical staff, assess their people skills. Make sure that their focus is on how technology supports the org, not strictly on the technology. At the same time, assess the non-IT staff for their technical skills, and hire people who are competent and appreciative of technology. We are long, long past the day when all computer support and expertise could be delegated to the IT Department.

It boils down to organizational culture and priorities. The hectic, resource-strained environments that many of us work in aren’t conducive to good record-keeping habits. This problem is bolstered by the general case where upper management is, for various reasons, ranging from misplaced faith to technophobia, not thinking of IT as a keeper of critical organizational records. But the truth is that a failure to keep it all written down is inevitably going to cost you, in dollars and productivity. The best solutions are holistic – create a culture where accountability for organizational assets is clear to all and shared by all, and, in particular, understand enough about the technical demands put on your IT staff – accidental and otherwise – to allow them to prioritize the small stuff along with all of the big projects and constant fires they put out. (more…)

Share

Why We Tweet

Skeptics take note – I agree with you that Twitter, the “microblogging” service that your friends are pressuring you to join, appears to be the ultimate synthesis of vanity and wasted time. All of that potential is there, and, worse, the service seems to advertise those traits as its raison d’etre. But I’m going to ask you to bear with me as I offer some arguments for the service.

Twitter is, at its core, a messaging service that is more immediate and casual than email, but less immediate and intimate than IM (Instant Messaging). Just as email bridged the gap between the letter and the phone call, Twitter bridges these digital extremes. But, unlike email – and more like, say, Delicious or Flickr, web sites that take what were traditionally private things – bookmarks and photo albums – and make them social, Twitter makes this messaging social. You can protect your tweets so that they can only be seen by people that you approve, but the majority of tweeters don’t do that.

I came to Twitter via NTEN. In 2007, as we were revving up for the annual conference in DC, a bunch of us signed up for Twitter accounts and used them—to mixed success—for casual announcements, off-agenda organizing and “Hey, what session are you in?” friend pinging. By the 2008 NTEN shindig in New Orleans, Twitter was an incredible asset. Even before the conference I was alerted to nationwide problems with flights, as I followed my friend @kariapeterson (and others) stories about being trapped in airports hours after their flights were due to leave.

Joining Twitter with a good chunk of my social/professional community was definitely a boon. If you sign up without a group of friends established, it can be a fair amount of work to identify and connect with people that share enough of your interests and motives for using Twitter. Because using Twitter involves more than just finding interesting people. It’s also about finding people who will interact with you on Twitter in ways that fit your needs and goals.

Margaret Mason’s wonderful blog entry on Twitter tips breaks down Twitter users into two camps:

“With the usual exceptions, people on Twitter tend to fall into two main camps. There are responders, who use Twitter as a channel to interact heavily with other users, and broadcasters, who use it primarily as a micro-blogging platform.”

The nptech crowd that I hang out with is squarely in the Responder’s camp. This is a social tool for us, not additional brochureware, and we use it to engage each other. For me, this has primarily meant that I have a casual channel to share and query my professional community on. I ask and answer a lot of questions. I engage in casual conversation. It’s allowed me to learn more about people who I share my nonprofit and technical interests with, broadening into family, film and music conversations, but in a way that is far more natural, friendly and interactive than poring over their Facebook profiles.

But the real power comes from the crowd. For example, @johnmerritt, who works as IT Director for a SoCal YMCA, did a Twitter survey about email server message limits. He requested that survey response tweets include the tag “#inboxlimit”, and then he set up a web page subscribing to an RSS feed for that tag, so that we could share a growing list of responses. This survey helped me provide context to my staff about our email policies.

On Monday, @webb, co-Exec at an awesome San Francisco nonprofit, asked us all what non-financial giving we have planned for the coming months, with the request that we tag our answers with “#givelist”. If you want to be inspired, and learn a lot of ways that you can be philanthropically productive without increasing your budget for donations, then the responses are a worthwhile read. You can learn even more at this website.

The typical assumption about any social networking site is that it will allow you to market your mission and, possibly, increase donations. Twitter, of course, can do those things, as Facebook or MySpace can, under the right conditions. But it’s a far more natural tool for generating ideas and camaraderie than cash. If you’re writing it off as just another place to promote yourself or your cause, I’d say that it deserves a deeper look.

Share

Managing by Maxim

I’m a big fan of maxims, adages, anything that sums up an important, and possibly complex point in a sentence that can convey, if not the whole point, at least a conversation starter. The main challenge for a technology manager is communication, particularly with those who are uninterested and/or threatened by technological terms. I live and breathe this stuff, but I understand that I’m in the ten percent, the ten percent of people who like and are completely comfortable with technology. The rest of the world ranges from averse to highly competent, but not gaga over it all, like I am. Remembering that, and approaching each project and decision with that in mind, has helped me accomplish significant things for people who aren’t necessarily bought in to all of my ideas on first listen.

My current favorite maxim is Users own functionality, techies own platforms. This encompasses a couple of key concepts. First, technology isn’t owned by IT or the people they serve; it’s owned by both those who install it and those who use it. Therefore, technology can’t be evaluated and planned for solely by one group or another. But I’ve seen lots of cases of both – IT rolling out a fundraising database or point of sale system with no input from the people who will base their revenue goals on the systems’ capabilities; and staff rolling out equally complex systems with little or no IT guidance. Both situations are likely to be a big waste of funds and effort. Second, the breakdown is clear – IT might be wowed by the cool, Ajaxy interface on that web app, but if it doesn’t have the reporting capabilities that the users need, they might be better served by something less flashy. That’s for the users to decide. But IT will have a better read on how sound a database structure is for querying and reporting, or what will integrate successfully with other key systems. So IT should have sway over the technologies used, to a large extent.

If you build it, they won’t come is another favorite. Unlike some cinematic baseball greats, techies can’t build huge systems in anticipation of user’s needs and expect them to be adopted, no matter how great the systems are. Clearly identified needs and ample amounts of input and involvement are required for home-grown system development. At my job, I am pushing agile development, which includes user testing and input from early on in development. This means that I’m teaching my staff how to let go a bit, and be more open to feedback, as I’m teaching the non-techie staff how to evaluate functionality in unfinished, and possibly somewhat ugly systems. It’s not as much training as it is imploring all parties to have some faith in each other.

In business communications, you haven’t said anything until you’ve said it three times in three different mediums. This one was taught to me by one of my greatest mentors, an ED at a commercial law firm that I worked at in the 90’s. It boils down to the terser rule of thumb: Assume that they haven’t read your email. The biggest mistake that we all make is thinking that we’ve made our intentions and priorities clear by sending a memo or an all staff email. The truly important initiatives that you’re pushing through should be reiterated and the message diversified, to reach people who may not respond to your favorite medium. And, as Paul has well-pointed out, at least one of those mediums should be verbal, and hopefully in the same room.

What are the maxims that you manage and survive by? Leave your best ones in the comments.

Share

The Lean, Green, Virtualized Machine

I normally try to avoid being preachy, but this is too good a bandwagon to stay off of. If you make decisions about technology, at your organization, as a board member, or in your home, then you should decide to green your IT. This is socially beneficial action that you can take with all sorts of side benefits, such as cost savings and further efficiencies. And it’s not so much of a new project to take on as it is a set of guidelines and practices to apply to your current plan. Even if my day job wasn’t at an organization dedicated to defending our planet, I’d still be writing this post, I’m certain.

I’ve heard a few reports that server rooms can output 50% or more of a company’s entire energy; PC Magazine puts them at 30-40% on average. If you work for an organization of 50 people or more, then you should look at this metric: how many servers did you have in 2000; how many do you have now? If the volume hasn’t doubled, at least, then you’re the exception to a very bloated rule. We used to pile multiple applications and services onto each server, but the model for the last decade or so has been one server per database, application, or function. This has resulted in a boom of power usage and inefficiency. Another metric that’s been quoted to me by IDC, the IT research group, is that, on average, we use 10% of any given server’s processing power. So the server sits there humming 24/7, outputting carbons and ticking up our power bills.

So what is Green IT? A bunch of things, some very geeky, some common sense. As you plan for your technology upgrades, here are some things that you can consider:

1. Energy-Saving Systems. Dell, HP and the major vendors all sell systems with energy-saving architecture. Sometimes they cost a little more, but that cost should be offset by savings on the power bills. Look for free software and other programs that will help users manage and automate the power output of their stations.

2. Hosted Applications. When it makes sense, let someone else host your software. The scale of their operation will insure that the resources supporting your application are far more refined than a dedicated server in your building.

3. Green Hosting. Don’t settle for any host – if you have a hosting service for your web site, ask them if they employ solar power or other alternative technologies to keep their servers powered. Check out some of the green hosting services referenced here at Idealware.

4. Server Virtualization. And if, like me, you have a room packed with servers, virtualize. Virtualization is a geeky concept, but it’s one that you should understand. Computer operating system software, such as Windows and Linux, is designed to speak to a computer’s hardware and translate the high-level activities we perform to machine code that the computer’s processor can understand. When you install Windows or Linux, the installation process identifies the particular hardware on your system—the type of processor, brand of graphics card, number of USB ports—and configures the operating system to work with your particular devices.

Virtualization is technology that sits in the middle, providing a generic hardware interface for the operating system to speak with. Why? Because, once the operating system is speaking to something generic, it no longer cares what hardware it’s actually installed on. So you can install your Windows 2003 server on one system. Then, if a component fails, you can copy that server to another system, even if it’s radically different – say, a Mac – and it will still boot up and run. More to the point, you can boot up multiple virtual servers on one actual computer (assuming it has sufficient RAM and processing power).

A virtual server is, basically, a file. Pure and simple: one large file that the computer opens up and runs. While running, you can install programs, create documents, change your wallpaper and tweak your settings. When you shut down the server, it will retain all of your changes in the file. You can back that file up. You can copy it to another server and run it while you upgrade components on it’s home server, so that your users don’t lose access during the upgrade. And you can perform the upgrade at 1:00 in the afternoon, instead of 1:00 in the morning.

So, this isn’t just cool. This is revolutionary. Need a new server to test an application? Well, don’t buy a new machine. Throw a virtualized server on an existing machine.

Don’t want to mess with installing Windows server again? Keep a virtualized, bare bones server file (VM) around and use it as a template.

Don’t want to install it in the first place? Google “Windows Server VM”. There are pre-configured virtual machines for every operating system made available for download.

Want to dramatically reduce the number of computers in your server room, thereby maximizing the power usage of the remaining systems? Develop a virtualization strategy as part of our technology plan.

This is just the surface of the benefits of virtualization. There are some concerns and gotchas, too, that need to be considered, and I’ll be blogging more about it.

But the short story is that we have great tools and opportunities to make our systems more supportive of our environment, curbing the global warming crisis one server room at a time. Unlike a lot of these propositions, this one comes with cost reductions and efficiencies built-in. It’s an opportunity to, once in place, lighten your workload, strengthen your backup strategy, reduce your expenses on hardware and energy, and, well—save the world.

Share

Complying with Data Security Regulation

An article appeared in the NonProfit Times this week regarding a recent ruling in Nevada requiring that all personal information be securely transmitted, e.g. encrypted. The article, States Push To Encrypt Personal Data is by Michelle Donahue, and quotes, among others, me and our friend Holly Ross, Executive Director of NTEN—it’s a worthwhile read. The law in question is a part of Nevada’s Miscellaneous Trade Regulations and Prohibited Acts. I’ve quoted the relative pieces of this legislation below, but I’ll sum it up here:
Personal information can not be transferred to you by your customers (donors) without encryption. Personal information is defined as any transmittal of someone’s name along with their credit card number, driver’s license, or other data that could be used to access their financal records.

Nevada is the first state to pass legislation like this, but it’s a good bet that they are the first of fifty. Massachusetts is right behind them. And if the government won’t get you, the credit card industry might. The regulations that they impose on larger retailers for credit card security are even tougher. These initially applied to retailers bringing in far more money via credit card than most of us do, but they have lowered the financial threshold each year, bringing smaller and smaller organizations under that regulatory umbrella.

So, the question is, how many of you receive donations via email? If you do accept donations over the web, are you certain that they’re encrypted from the time of input until they land inside your (secured) network? What do you do with them when you receive them? Do you email credit card numbers within the office? Retain them in a database, spreadsheet or document?

Most nonprofits are understaffed and unautomated. We accept donations in any manner that the donors choose to send them, and get them into our records-keeping systems in a myriad of fashions. The bad news here is that this will have to change. The good news is, if you do it right, you should be able to adopt new practices that streamline the maintenance of your donor data and reduce the workload. Even better, if the solution is to move from Excel or Word to Salesforce or Etapestry, then you’ll not only have a better records-keeping system, you’ll also have good analytical tools for working with your donors.

Automating systems, refining business processes, improving data management and maintenance—these are all of the things that we know are important to do someday. It looks like the urgency is rising. So don’t treat this threat as an impediment to your operations—treat it like an opportunity to justify some necessary improvements in your organization.

The relevent snippet from the Nevada law:

” 1. A business in this State shall not transfer any personal information of a customer through an electronic transmission other than a facsimile to a person outside of the secure system of the business unless the business uses encryption to ensure the security of electronic transmission.

2. As used in this section:


(a) “Encryption” has the meaning ascribed to it in NRS 205.4742.


(b) “Personal information” has the meaning ascribed to it in NRS 603A.040.


“Personal Information” is defined as:


“Personal information” means a natural person’s first name or first initial and last name in combination with any one or more of the following data elements, when the name and data elements are not encrypted:


1. Social security number.


2. Driver’s license number or identification card number.


3. Account number, credit card number or debit card number, in combination with any required security code, access code or password that would permit access to the person’s financial account.


The term does not include the last four digits of a social security number or publicly available information that is lawfully made available to the general public.





Share

Book Report

NTEN’s first book is available for pre-order, and you can find me in it. “Managing Technology to Meet Your Mission: A Strategic Guide for Nonprofit Leaders” is a one of a kind book, designed to help the CEOs, COOs and EDs in our industry understand how technology supports their organizations. I wrote chapter 4, “How to Decide: IT Planning and Prioritizing”. You can also order it on Amazon; NTEN members can pick it up for $30 when they register for the annual conference. The book is due out in March.

Managing Technology to Meet Your Mission

Share