Why are private foundations targeted by payment fraud?▼
Foundations make large, regular payments to organizations staff know mostly through email, and their public filings list grantees, officers and trustees. That gives attackers a map: who pays whom, roughly when and who has authority. A lookalike domain and a well-timed email about new bank details can be enough if there’s no verification step. Small teams under deadline pressure are especially exposed. A call-back rule and dual approval close most of that risk.
Do our trustees really need foundation email accounts?▼
We recommend it. Trustees using personal email for board business mix foundation records with personal accounts that often lack MFA, and attackers use compromised personal accounts to impersonate trustees convincingly. Foundation accounts with MFA, paired with a secure board portal, give trustees one place for foundation business and give the foundation control of its records. Setup takes minutes per trustee, and we provide simple instructions for volunteers who aren’t technical.
How should we protect scholarship applicant information?▼
Scholarship and individual grant programs can collect personal details, transcripts and financial or tax documents. We move those files out of email and shared drives into managed storage with access limited to staff and reviewers who need it. Secure upload portals replace email attachments. Retention schedules, approved by your counsel, make sure old applications don’t sit around indefinitely. Access is logged, so you know who viewed sensitive files if questions come up later.
What does a security program look like for a foundation with a small staff?▼
It should be short and practical. Typically it covers who is responsible, how accounts and devices are managed, payment verification procedures, how sensitive data is stored and retained, backups, vendor oversight and what to do in an incident. We write it with you, implement the controls behind it and keep evidence current. Auditors, insurers and board members get a clear document that reflects how the office actually works, updated as staff and systems change.
Can you protect our family members who serve as trustees?▼
Within the foundation’s scope, yes. We secure their foundation accounts and devices, watch for impersonation of family names and domains, protect shared calendars and travel details and train family trustees on the targeted phishing that public visibility attracts. Personal security beyond foundation business, such as home networks or personal financial accounts, is better handled by your family office or advisors, and we’re glad to coordinate with them so nothing falls between the two.
Do you work with foundations outside your area?▼
Yes. Foundation IT is almost entirely cloud-based, so we support private and family foundations across the country remotely: devices, email, grants systems, backups and security monitoring. When an office needs on-site work, such as a new firewall, Wi-Fi improvements or a conference room setup for board meetings, our engineers handle it locally near our offices or direct a vetted local technician while staying on the call until the work is verified.
Do you provide Private Foundations IT Services in Houston and nearby areas?▼
Yes. LayerLogix is based in the Greater Houston area and delivers private foundations IT services to businesses across Houston and the surrounding communities, including The Woodlands, Spring, Katy, Sugar Land, Conroe, Cypress, and Pearland. For most Houston-area clients we can be on-site the same day when something needs hands-on attention, and our help desk is available during business hours, with after-hours emergency support. Call 713-571-2390 to check coverage for your specific address.
What does Private Foundations IT Services cost for a Houston business?▼
Pricing depends on your size and what you need, so we do not publish a one-size-fits-all number — but Houston businesses generally pay a flat, predictable monthly fee rather than surprise hourly bills. We start with a free, no-obligation assessment of your current setup, then give you a clear quote in plain English with no hidden costs. That way you know exactly what you are getting and what it costs before you commit.