CompuMentor needs your help! We developed a
guide for non profits to use to do a security audit of their window desktops
and networks. We need a few mentors to take this into the real world and do an
audit following the steps in the guide and reporting back to us on what, if
anything, was missing. The audit should
be done on a small non profit or business.

This is a shorter project commitment than usual, lasting only a month. Please e-mail mentor@compumentor.org if you're interested in volunteering for this.

Healthy and Secure Computing is a set of best practices and recommended technologies that, when taken together, will help small to medium-sized nonprofits build and maintain a stable and secure IT infrastructure. A healthy and secure computing environment will allow you to plan for and implement transformative technologies, integrate IT with programmatic functions, lower basic IT support costs, and improve reliability of IT systems. The key goals of HSC include:

This workbook will help you create an information technology environment that we call Healthy and Secure Computing (HSC). It is not a technology guide or user's manual. Rather, it is a guide to making decisions that will minimize the costs and increase the reliability and security of your information technology.

Use this workbook with the full Healthy and Secure Computing support documents, located at http://www.compumentor.org/HSC, and as a companion to workshops and seminars explaining HSC.

This workbook was developed by CompuMentor's Healthy and Secure Computing program for use in a series of training sessions for small nonprofit organizations in the San Francisco Bay Area. The content is offered here to the community in the hope that someone else may be able to benefit from it.

Implementation Materials

The HSC program includes guides for implementing our recommended baseline technologies. These materials include both step-by-step directions for manual implementation and automated installation tools, where possible. If you follow these guides you will insure that your computer and network installations are indeed healthy and secure.

These guides are included in the appendixes, and are available on the HSC program Web site.

Appendices
Appendix 1 - Implementation Guidelines

General Documentation

Fancy IT systems won't do your organization any good unless your staff has the necessary skills and knowledge to use the systems, so make sure that resources are set aside to cover the costs of staff training. There are various ways to approach IT skills training, from formal classroom lessons, to informal one-to-one knowledge transfer.

Here are some basic recommendations for IT skills training.

Nonprofit IT staff fall into two common roles, the IT manager and the accidental techie. An IT manager is a staff member with an IT support background whose primary job responsibilities include IT support for the organization. This role is responsible for most IT decision making. An accidental techie is a staff member with basic IT skills, but whose primary responsibilities are not IT-related. Often the accidental techie participates with management to make IT decisions rather than taking sole responsibility for those decisions.

Desktop User Support
Any organization that uses computers needs to have some form of end-user support. This can be provided in a number of different ways, but this support needs to be available. Lack of this first-level support is almost certain to result in significantly more costs, in staff time and data loss, than it will cost to provide.

Technology is not a one-time retail experience. Ongoing maintenance, support and management are essential, or the technology will degenerate. Proper support procedures and the resources needed to provide them are essential. An important part of the HSC program is a set of support and documentation materials. These materials help you with HSC program adoption, implementation, support, and maintenance. Below is an overview of the support and documentation materials. More detailed samples are located in Appendix 3.