Strengthening Cybersecurity in Your Club

In the first half of 2024, data breaches increased by 9 per cent, while the cost of cybercrime rose by 8 per cent for small businesses. These figures make it clear – protecting data is no longer optional.

For many clubs, understanding what data is collected, where it is stored and how it is protected remains a work in progress. Whether dealing with personal, financial or health-related information, clubs must take steps to secure data and prevent costly breaches.

Club Education Institute Training Seminar

The Club Education Institute (CEI) is currently offering a seminar titled Cybersecurity Beyond Policies. 

This session offers valuable insights into building a strong cybersecurity strategy and outlines the key responsibilities of directors in managing and mitigating evolving cyber risks. 

Attendees will also receive practical guidelines and a detailed checklist to support directors in meeting their duty of care with confidence.

If this seminar is something you are interested in attending, please visit the CEI Seminars tab in your ClubsNSW portal to register interest.

A Three-Step Approach

To build a strong cybersecurity foundation, clubs should adopt a three-step approach: Review, Revamp and Reinforce.

1. Review – Understand Your Data Landscape

Identify what data your club collects and where it is stored (on-premises, in the cloud or with third-party vendors).

• Assess existing security measures, including who has access to sensitive data and the controls in place to protect it.
• Ensure compliance with the Privacy Act 1988 by updating data security policies.
• Train staff to understand their role in handling sensitive information securely.

2. Revamp – Strengthen Cybersecurity Strategies

• Consolidate data storage where possible, to reduce exposure and simplify security measures.
• Regularly back up data and store it securely.
• Implement strong access controls, such as multi-factor authentication (MFA) and role-based permissions.
• Keep all software and systems updated to guard against security vulnerabilities.
• Use strong passwords or passphrases and enable MFA wherever possible.
• Be cautious when transferring data – use secure file-sharing platforms.

3. Reinforce – Build a Cybersecurity-Focused Culture

• Conduct regular cybersecurity training for staff to improve awareness and preparedness.
• Establish clear incident response plans so employees know what to do in the event of a breach.
• Stay vigilant against phishing scams designed to trick staff into giving away sensitive information.
• Encourage reporting of suspicious activity and keep informed about emerging threats.

There are some other safety measures to keep in mind. Before responding to any request for sensitive information:

• Stop and verify – confirm the legitimacy of emails, calls or texts before taking action.
• Check sender details – look for unofficial email addresses or grammatical errors.
• Protect your information – never click suspicious links or share personal data with unverified sources.

If you suspect a scam:

• Visit Scamwatch for guidance on identifying and reporting scams.
• If you've shared information with a scammer, contact the ATO on 1800 008 540 for assistance.

Cybersecurity: A Shared Responsibility

Cybersecurity is not just an IT issue – it requires collective action across all levels of a club. By reviewing data management practices, strengthening security measures and fostering awareness, clubs can protect their members, employees and operations.

Taking simple but effective steps now can prevent significant financial and reputational damage in the future. 

Cyber threats will continue to evolve, but with the right strategies, clubs can stay ahead and keep their data secure.