Pragmatic security policy for human rights teams
- Phases
- understand define deliver sustain
- Modality
- Clinic
- Status
- Complete
Developed a cybersecurity policy with Global Partners Digital, built through team workshops and delivered as a usable online resource.
Most cybersecurity policies in civil society are written, filed, and ignored. We worked with Global Partners Digital to build one their team would actually use. The process leaned on workshops with the whole team, EFF's Diceware for credential hygiene, and SOAP as the policy-building scaffold, and was grounded in the conversations those tools prompted to surface the real risks and habits.
The final policy lives as a secure online resource, structured around practical and pragmatic tooling and advice. It tries to honestly balance between security and usefulness, accepting friction where justified by the thread model. The work was a focused engagement, completed in 2024.