Securing Cloud Services in Non-Profit Organizations
Author: Dr. Anna Neya Kazanskaia
Publisher: NEYA Global Publishing
Article | NEYA Global Journal of Non-Profit Studies
Year: 2025
ORCID: https://orcid.org/0009-0009-5669-1676
DOI: https://doi.org/10.64357/neya-gjnps-cbr-scr-es-58
This material forms part of the NEYA Global knowledge architecture. Institutional, organizational, professional, training, consulting, curriculum, program design, or implementation use requires an active license from NEYA Global
Explore Architecture →
Module Overview →
Request Institutional Access →
About the Article
Cloud platforms offer affordability, scalability, and global reach for non-profit organizations, but they also shift certain security responsibilities to providers while increasing the customer’s accountability for identity, configuration, and data governance. This article presents a practical, standards-aligned blueprint for securing cloud services in resource-constrained NPOs. It addresses shared responsibility, high-impact controls including encryption, IAM, continuous monitoring, backups, and network segmentation. Provider selection criteria, SLA considerations, and policy automation are discussed, along with illustrative case vignettes demonstrating KMS-based encryption, immutable backups, and automated remediation. By integrating authoritative guidance from NIST, ISO/IEC, CSA, OWASP, and provider frameworks, the article provides a cost-aware roadmap that preserves mission continuity and donor trust.
Key Topics
- Cloud security for non-profit organizations
- Shared responsibility model and IAM best practices
- Data encryption and key management
- Network segmentation and logging
- Backup, recovery, and disaster recovery planning
- Provider selection, CSPM, and security assurance
Suggested Citation
Kazanskaia, A. N. (2025). Securing Cloud Services in Non-Profit Organizations. NEYA Global Journal of Non-Profit Studies. Neya Global Publishing. https://doi.org/10.64357/neya-gjnps-cbr-scr-es-58
References
| Amazon Web Services. (2023). Shared Responsibility Model. AWS Whitepaper. | ||||
| Cloud Security Alliance (CSA). (2021). Cloud Controls Matrix (CCM) v4. Cloud Security Alliance. | ||||
| International Organization for Standardization. (2015). ISO/IEC 27017:2015-Code of practice for information security controls based on ISO/IEC 27002 for cloud services. ISO. | ||||
| International Organization for Standardization. (2019). ISO/IEC 27018:2019-Protection of PII in public clouds acting as PII processors. ISO. | ||||
| Kazanskaia, A. N. (2025). Cybersecurity Essentials. NEYA Global Publishing. https://doi.org/10.64357/cybersecurity-essentials-2025 | ||||
| Kazanskaia, A. N. (2025). Guide to Digital Transformation. NEYA Global Publishing. https://doi.org/10.64357/guide-to-digital-transformation-2025 | ||||
| Kazanskaia, A. N. (2025). Technology Tools for Efficiency & Impact. NEYA Global Publishing. https://doi.org/10.64357/technology-tools-2025 | ||||
| Kazanskaia, A. N. (2025). Harnessing Big Data: Insights for Better Decision Making. NEYA Global Publishing. https://doi.org/10.64357/harnessing-big-data-2025 | ||||
| Kazanskaia, A. N. (2025). Cybersecurity Tools and Technologies for Non-Profit Organizations. NEYA Global Journal of Non-Profit Studies. https://doi.org/10.64357/neya-gjnps-cbr-scr-es-60 | ||||
| Kazanskaia, A. N. (2025). Data Protection and Privacy in Non-Profit Organizations. NEYA Global Journal of Non-Profit Studies. https://doi.org/10.64357/neya-gjnps-cbr-scr-es-57 | ||||
| National Institute of Standards and Technology (NIST). (2020). SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems and Organizations. NIST. | ||||
| OWASP Foundation. (2022). OWASP Top 10 Cloud Security Risks. OWASP. | ||||
| Amazon Web Services. (2023). AWS Well-Architected Framework. AWS Whitepaper. | ||||
| AICPA. (2017). Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (SOC 2®). American Institute of CPAs. | ||||
