Best Practices Make Perfect

• Build and maintain a secure network;
• Protect cardholder data;
• Maintain a vulnerability-management program;
• Implement strong access-control measures; and
• Regularly monitor and test networks.

In terms of privacy, best practices often come down to good ethical practices. Let your donors know you will not sell their e-mail address or continue to send them e-mail solicitation if they request to be removed from your list. Place a "permission to e-mail" or an "opt-in/opt-out" check box on the forms they complete so you can keep track of who wants to hear from you via e-mail, and who would rather not.