Play It Forward // Security Briefing
01 / 14
Staff Training Module

Secure Our Perimeter

2FA adoption and essential security protocols for all team members.

ORGANIZATIONAL DIRECTIVE • play-itforward.org

Defending against automated bot attacks, credential phishing, and open link leaks.

Threat Mitigation Metrics

The Value of 2FA

99.9%
Automated bot attacks blocked instantly.
(By simply enabling Two-Factor Authentication on your accounts)
Shield Defended: 1,420
The 2FA Mechanism // Dual Factors

The 2FA Mechanism

Security relies on dual verification factors.

FACTOR 01 // KNOWLEDGE

Something You Know

Your password or passphrase.

Interactive Passphrase Strength: High Entropy
Brute Force Estimate: Cracked in 400+ years
The 2FA Mechanism // Dual Factors

The 2FA Mechanism

Security relies on dual verification factors.

FACTOR 02 // POSSESSION

Something You Have

Your smartphone or hardware token.

ROTATING TOTP CODE
482 910
Two Paths, One Standard

Two Paths, One Standard

Everyone must secure their access.

Google Workspace Users

Managed Corporate Access
  • Mandatory enforcement
    Required for all logins.
  • Google Prompts
    Preferred tap-to-verify method.
  • Admin oversight
    Centralized security tracking.
Two Paths, One Standard

Two Paths, One Standard

Everyone must secure their access.

Personal Email Users

External / Individual Accounts
  • Self-managed security
    You must turn it on.
  • Authenticator apps
    Highly recommended setup.
  • Zero-trust policy
    Required for organizational access.
Defeating Phishing

Defeating Phishing

Attackers will try to steal both your password and your 2FA code. Stay vigilant.

01 // Verify Sender Domain
Check exact email addresses.
02 // Avoid Urgent Links
Never click panicked requests.
03 // Check URLs
Ensure login pages are real.
Live Phishing Simulation
Password Fundamentals

Password Fundamentals

2FA supplements strong passwords; it does not replace them.

15+

Characters Long

Use full phrases, not words.

0

Reused Passwords

Unique strings everywhere.

1

Password Manager

Store credentials securely.

crimson-falcon-glacier-77
Information Governance // PM Standard

Project Data Classification

Project Managers must isolate confidential budgets and beneficiary records from public assets.

📄
Project Budget & Donor Grants
Financial ledger & salary allocations
📋
Sprint Backlog & Officer Notes
Team tasks & operational roadmap
🌐
Published Impact Report
External press release & annual overview
Triage Progress: 0 / 3 assets classified correctly.
Secure Data Collaboration

Secure Data Collaboration

✕ No Open Links

Disable "Anyone with the link" access.

✓ Specific Invites

Share only with exact email addresses.

⏱ Set Expirations

Remove access when projects end.

🔒 Restrict Downloads

Prevent copying of sensitive files.

"Anyone with link can view"
Unrestricted public indexing
CRITICAL EXPOSURE: Toggle OFF open links to harden file sharing.
Guest Access Lifecycle // Project Offboarding

Contractor & Partner Access

Project Managers must bound external collaborator access. Never leave perpetual permissions.

Enforce Link Expirations
Automatically expire vendor folder links in 30 days
Post-Project Contractor Revocation
Audit & remove access when consulting milestones finish
Disable Resharing & Downloading
Prevent external partners from making offline copies
LIFECYCLE SECURED: All external consultant & vendor permissions are time-bound and restricted.
Rapid Officer Escalation // 3-Step Protocol

Incident Response Protocol

If an officer clicks a suspicious link or misplaces a device, follow the 3-step immediate protocol.

01 // Isolate Device Immediately
Disconnect Wi-Fi immediately. Do not power off.
02 // Escalate to Lead & IT
Notify Security Officer at play-itforward.org at once.
03 // Preserve Evidence
Do not delete phishing emails or attempt DIY fixes.
Security is a Shared Duty

Security is a Shared Duty

Our network is only as strong as its most vulnerable account. Enable 2FA today.

ACTION ITEM 1

Activate 2FA on all accounts.

ACTION ITEM 2

Audit your shared Drive files.