Post-Engagement Implementation Blueprint

Follow-Up Work Plan & Action Checklist

Review your post-session priorities, established community commitments, and unbreakable rules. Select your track below to view the customized work plan, interactive checklist, and threat defense matrix.

Framework Anchors • Institutional Leadership & Governance
Bitchon (בִּטָּחוֹן)
Identity Defense & MFA Mandates
Derech Eretz (דֶּרֶךְ אֶרֶץ)
Confidentiality & Human Dignity
Shomer (שׁוֹמֵר)
Grant Maximization & Tech Bloat Audits
Arvut (עַרְבוּת)
Board Governance & MSP Oversight
Hanhagah (הַנְהָגָה)
Culture Over Switches

🔒 Privacy & Security Guarantee: Protecting Sensitive Personal Data

Small Staff, Rigorous Protection: Synagogues and Jewish nonprofits frequently operate with small administrative teams, yet handle extraordinarily sensitive personal information—including pastoral counseling notes, illness and health updates, financial hardship requests, tuition assistance applications, and donor giving histories. Regardless of staff size, institutions must apply high-level privacy safeguards (strict Role-Based Access Control, encrypted storage, zero unencrypted email transmissions, and no personal device storage). Protecting congregant privacy is an active fulfillment of safeguarding human dignity (Kavod [כָּבוֹד]).

Institutional Leadership Protocols

Aligning resource stewardship, operational privacy, and fiduciary duty with core Jewish values

Shomer (שׁוֹמֵר)

Grant Maximization & Software Consolidation

Eliminating "Tech Bloat" & Claiming Nonprofit Tiers

Paying for redundant software (Zoom, Dropbox, Slack) when native Microsoft 365 or Google Workspace licenses already provide these tools for free violates Bal Tashchit (בַּל תַּשְׁחִית). Organizations must annually claim nonprofit tech grants—including free M365/Google Workspace tiers, Canva for Nonprofits, and Google Ad Grants—redirecting saved dollars directly into core mission programming.

Derech Eretz (דֶּרֶךְ אֶרֶץ)

Safeguarding Sensitive Pastoral & Personal Records

Data Privacy as Human Dignity: Kavod (כָּבוֹד)

A small administrative team is no excuse for loose data handling. Pastoral counseling notes, health updates, financial hardship requests, and donor lists must never be emailed in plain text or saved on unencrypted personal devices. Implement Role-Based Access Control (RBAC) to isolate sensitive files in encrypted vaults accessible strictly to authorized personnel.

Arvut (עַרְבוּת)

Board Oversight & Vendor Accountability

MSP Governance & Cyber Insurance Audits

Boards must drag technology out of the "IT basement" into boardroom governance. This includes running an annual "Bridge Audit" to verify that actual technical controls (such as universal MFA) match fine-print cyber insurance policy mandates, reviewing Managed Service Provider (MSP) SLAs, and enforcing same-day digital offboarding for departing personnel.

Nonprofit Safety & Governance Reference Matrix

Actionable operational rules for neutralizing financial fraud, data exposure, and vendor risks

Threat / Scenario What It Looks Like / Context Unbreakable Rule: Hanhagah (הַנְהָגָה)
Targeted Impersonation ("The Rabbi Scam") Urgent email or text claiming to be from the Senior Rabbi, Board President, or Executive Director requesting gift cards, wire transfers, or altered invoice payment details. Verify-by-Phone: Never execute financial transactions or purchase gift cards based on digital messages alone. Call an established directory number to confirm.
Casual Confidentiality Breaches Pastoral counseling notes, health details, financial aid applications, or hardship lists emailed unencrypted or stored in general staff cloud folders. Encrypted Isolation: Restrict sensitive pastoral, medical, and financial data to isolated folders with strict Role-Based Access Control (RBAC).
SaaS Sprawl & "Shadow IT" Individual staff or educators using personal/institutional credit cards for rogue subscriptions (Dropbox, Zoom, Trello) without central IT review. Ecosystem First: Audit credit cards annually to consolidate software into primary cloud environments (Microsoft 365 / Google Workspace).
Unvetted Generative AI Use Staff pasting confidential member files, health notes, or pastoral counseling details into public AI tools to write summaries or drafts. Human-in-the-Loop: Never input sensitive or identifying data into public AI prompts. All AI-assisted drafts must be thoroughly vetted by a human.
Cyber Insurance Policy Gap Paying for cyber insurance while lacking fine-print mandatory technical controls (e.g. universal MFA across all administrative accounts). Annual Bridge Audit: Board must review actual technical configurations line-by-line against insurance policy attestations annually.
Unmonitored Vendor & User Access Former board members, staff, or third-party contractors retaining digital access to cloud drives, donor CRMs, or email accounts post-departure. Same-Day Revocation: Institute mandatory offboarding procedures ensuring digital access is revoked the exact day an individual leaves their role.
Framework Anchors • Older Relatives & Family Stewards
Bitchon (בִּטָּחוֹן)
Venishmartem (וְנִשְׁמַרְתֶּם) & Active Defense
Derech Eretz (דֶּרֶךְ אֶרֶץ)
Kavod (כָּבוֹד) & De-Stigmatization
Shomer (שׁוֹמֵר)
Stewardship of Legacy & Family Privacy
Arvut (עַרְבוּת)
Mutual Care & "Second Pair of Eyes"
Culture Over Switches
Protecting without taking away autonomy

💡 Culture Over Switches: Hanhagah (הַנְהָגָה) in Elder Care

Internal Character & Mutual Respect Over Rigid Locks: Technical restrictions can block bad actors, but long-term digital safety for older relatives relies on trust, open dialogue, and personal cyber hygiene (Middot [מִדּוֹת]). Maintaining strong personal Cyber Hygiene (verifying safe-words verbally and never writing down unencrypted passwords, SSNs, or PINs in cleartext) ensures family protection remains an active daily practice rooted in Bitchon (בִּטָּחוֹן).

Digital Boundaries: What Is Safe to Share

Guarding real-time privacy, family location data, and identity details for older adults and caregivers

Venishmartem (וְנִשְׁמַרְתֶּם)

What’s Safe vs. Dangerous to Share

Where & When to Post Information

Safe to Share: Photos of family gatherings or travels after returning home (delayed tagging), general milestone announcements, and inspiring articles.

Dangerous to Share: Real-time travel posts showing an empty house, home street address, full birthdate, Medicare/SSN numbers, banking details, or 2FA codes. Broadcasting live location lets scammers target empty homes or tailor fraudulent calls.

Derech Eretz (דֶּרֶךְ אֶרֶץ) & Arvut (עַרְבוּת)

Supporting Adults Who Don't See Risks

With Whom to Share & De-Stigmatizing Mistakes

Elderly relatives raised in pre-digital eras often trust polite callers, online pop-ups, or social media "quizzes." Frame sharing boundaries as family protection ("Second Pair of Eyes") rather than taking away independence. Reassure older adults that checking unexpected requests together is an act of mutual care (Arvut [עַרְבוּת]), never a reason for shame.

Shomer (שׁוֹמֵר) & Lashon Hara (לָשׁוֹן הָרָע)

Family & Grandchildren Photo Privacy

Digital Permanence & Social Media Boundaries

Photos shared publicly can be saved, edited, or scraped by AI algorithms. Teach older adults to keep social media accounts private ("Friends Only"), avoid tagging grandchildren's full names or school uniform logos, and never post medical updates or legal documents publicly on social channels.

Spotting & Defending Against Targeted Threats

Proactive defense against voice cloning, fake support pop-ups, and text spoofing

Threat Defense • Bitchon (בִּטָּחוֹן)

Urgent Grandchild & Emergency Scams

AI Voice Impersonation & Verification

Scammers frequently impersonate children, grandchildren, or clergy claiming to be in distress and demanding immediate wire transfers, gift cards, or app payments. Teach family members to pause and verify: always hang up immediately and call the relative back directly at their known phone number or ask for the verbal family safe-word.

Active Warning • Fake Support

Fake Tech Support & Browser Pop-Ups

Defending Against Intimidation Tactics

Web browser pop-ups often lock screen navigation with loud audio warnings claiming a virus was detected and urging a phone call. Establish an absolute rule: legitimate tech companies (like Apple or Microsoft) never put phone numbers in security pop-ups. Teach relatives to force-restart or turn off the device rather than calling any listed phone number.

Threat Defense • Emet (אֱמֶת)

Bank & Delivery Text Spoofing

Smishing & Fraud Alert Impersonation

Scammers send text alerts claiming a bank account is locked, a package is delayed, or a wire transfer requires immediate login. Establish a simple rule: never click links in text messages. Always log in directly via official browser bookmarks or call the bank's phone number on the back of your card.

Digital Estate & Continuity Planning

Serving as faithful stewards (Shomer [שׁוֹמֵר]) of family assets, records, and digital access

Stewardship • Shomer (שׁוֹמֵר)

Legacy Contacts & Emergency Access

Ensuring Seamless Family Access

Assist aging relatives in configuring Digital Legacy Contacts on their Apple, Google, or primary email accounts. This guarantees that designated family members can securely access essential records, photos, and accounts during a medical emergency or transition without violating privacy or getting locked out.

Organization • Shomer (שׁוֹמֵר)

Consolidating Account Access

From Notebook Lists to Encrypted Vaults

Eliminate unmanaged paper lists, sticky notes, and lost notebooks by transitioning family credentials into an encrypted password manager with family emergency recovery. This protects accounts from physical loss or theft while giving trusted family stewards clear emergency access.

Stewardship • Bal Tashchit (בַּל תַּשְׁחִית)

Subscription & Payment Audits

Eliminating Unused & Recurring Digital Charges

Older adults often accumulate unused software, cloud storage fees, or recurring app subscriptions. Audit bank statements and mobile subscriptions annually to remove redundant fees, optimizing financial resources while simplifying account overhead.

Aging Parents Scam & Safety Reference Matrix

Quick-reference guide for navigating phone scams, over-sharing traps, and digital emergencies

Threat / Scenario What It Looks Like / Context Unbreakable Rule: Hanhagah (הַנְהָגָה)
Real-Time Location & Travel Exposure Posting live vacation updates, travel check-ins, or daily schedules on public social media feeds. Delayed Tagging (Venishmartem [וְנִשְׁמַרְתֶּם]): Keep accounts private and post travel photos only AFTER returning home to protect physical security.
DM & Email Sensitive Info Requests Unsolicited messages or online forms asking for Medicare numbers, Social Security, or bank details to "verify benefits." Zero Online Disclosure: Never share SSN, Medicare, or banking details online or in DMs. Verify all benefit calls with your family steward.
Urgent Grandchild / AI Voice Scams A panic call using cloned AI voice claiming a relative is arrested, in an accident, or needs immediate cash/wire. Verify-by-Safe-Word: Hang up immediately and call relative directly at their normal number or demand your secret verbal safe-word.
Browser Security Pop-Ups Loud audio alerts or full-screen warnings saying "Virus Detected! Call Microsoft/Apple Support Immediately at 1-800..." Never Call: Legitimate companies never put phone numbers in pop-ups. Turn off or force-restart the computer immediately.
Social Media Quizzes & Family Data Casual online games asking for mother's maiden name, first pet, high school name, or birth city. Skip Online Quizzes: These quizzes harvest answers to common password security questions. Never answer personal trivia games online.
Fake Bank Fraud Texts (Smishing) Text message claiming an unauthorized charge occurred and asking you to click a link or reply with a code. Log In Directly: Never click text links. Log in via official browser bookmarks or call the number on the back of your bank card.
Framework Anchors • Student Leadership & Digital Citizenship
Bitchon (בִּטָּחוֹן)
Venishmartem (וְנִשְׁמַרְתֶּם) & Peer Defense
Derech Eretz (דֶּרֶךְ אֶרֶץ)
Kavod (כָּבוֹד) & Digital Shmirat HaLashon (שְׁמִירַת הַלָּשׁוֹן)
Emet (אֱמֶת)
Truth, AI Ethics & Digital Permanence
Arvut (עַרְבוּת)
Upstanding & Mutual Safeguards

💡 Cyber Security & Safe-Word Hygiene Notice

Never write down sensitive passwords, 2FA codes, or safe-words in cleartext. In alignment with Bitchon (בִּטָּחוֹן), there are zero text entry fields for confidential passphrases or identities on this sheet. Establish family and friend safe-words verbally, and use the reference checkboxes below to confirm your protections are in place.

Social Media Ethics & What Is Safe to Share

Understanding digital boundaries, real-time exposure risks, and the irreversible permanence of online media

Venishmartem (וְנִשְׁמַרְתֶּם)

What’s Safe vs. What’s Dangerous

Guarding Real-Time Privacy & Identity

Safe to Share: Venue photos after you depart, general accomplishments, creative projects, and uplifting messages.

Dangerous to Share: Real-time location tags, home addresses, class schedules, full birthdates, phone numbers, and 2FA login codes. Broadcasting live location lets bad actors track your movements or target your home.

Emet (אֱמֶת) & Lashon Hara (לָשׁוֹן הָרָע)

Explicit Media & Digital Permanence

Photos of Yourself or Others Never Disappear

Sexually graphic or intimate images – whether of yourself or someone else – must never be taken, uploaded, or shared. Like the classical rabbinic metaphor of releasing feathers into a gale, once a photo goes digital, it inevitably makes its way out into the world. It will exist in multiple servers, caches, or cloud archives forever.

Arvut (עַרְבוּת) & Bitchon (בִּטָּחוֹן)

Safe-Words for Friends & Family

Defending Against Spoofing & AI Clones

Your close friends are like extended family. Because hijacked social accounts, spoofed texts, and AI voice cloning are common, scammers routinely impersonate friends to ask for money, gift cards, or login codes. Establish a verbal secret safe-word with your inner circle to confirm identity whenever an urgent or unusual request comes through.

Advanced Scams & Protection for Teens

Recognizing manipulative tactics, social engineering traps, and digital extortion attempts

Threat Alert

DM Account Hijacking Scams

"Hey, send me the code you just got!"

Scammers compromise a friend's Instagram, Snapchat, or Discord account and DM you claiming: "I'm locked out of my account, can you receive a link/code for me?" In reality, they are using "Forgot Password" on your account. Giving them that SMS code gives them immediate control of your profile.

Derech Eretz (דֶּרֶךְ אֶרֶץ)

Digital Upstanding & Cyberbullying

Kavod (כָּבוֹד) & Shmirat HaLashon (שְׁמִירַת הַלָּשׁוֹן)

Group chats and secondary social accounts can easily turn into rumor mills. Refuse to participate in targeted exclusion groups or forward private screenshots intended to mock peers. If a classmate is targeted or a fake impersonation account is made, report the account to platform admins and offer private support.

Emet (אֱמֶת)

Ethical AI Stewardship

Protecting Personal & Friend Data

Generative AI engines (ChatGPT, Claude, Gemini) store prompts to train future models. Never upload personal photos, friend lists, school roster spreadsheets, or confidential notes into AI tools. Use AI to clarify complex ideas and tutor you, but preserve academic honesty by submitting original human work.

Scam & Safety Reference Matrix

Quick-reference guide for navigating peer pressure, digital scams, and online ethical dilemmas

Threat / Scenario What It Looks Like / Context Unbreakable Rule: Hanhagah (הַנְהָגָה)
Explicit Media & Sextortion Scams Online contacts or pressure to send intimate images, followed by threats of blackmail or posting photos online. Zero Digital Uploads: Never capture or share explicit photos. If targeted by extortion, do not pay – tell a trusted adult, school counselor, or parent immediately.
DM Account Takeover / Code Requests A friend DMing: "I'm locked out, send me the 6-digit code sent to your phone so I can unlock my profile." Never Share Codes: 2FA login codes are strictly private. Sharing a code gives attackers immediate control of your account.
Friend & Family AI Voice / Text Spoofing Urgent calls or texts from a friend or relative claiming an emergency and asking for gift cards, Venmo, or codes. Verify-by-Safe-Word: Disconnect immediately. Call the friend back at their known phone number or demand your secret verbal safe-word.
Group Chat Gossip & Exclusion Targeted group chats formed to mock classmates, or screenshots forwarded to humiliate peers. Pause Before Sharing: Refuse to forward private screenshots or rumors. Leave toxic chats and uphold Kavod (כָּבוֹד).
Real-Time Location Exposure Posting live geo-tags, home addresses, or daily travel routes on public social media accounts. Delayed Tagging: Keep personal accounts private and tag venue photos only after departing to protect physical security.
AI Academic Plagiarism & Data Input Copying AI text directly into school papers or pasting friend contact details into public AI prompts. Human-in-the-Loop (Emet [אֱמֶת]): Use AI as a tutor. Coursework must reflect original human effort, and private data must never enter public AI.
Framework Anchors • The Mindful Home
Bitchon (בִּטָּחוֹן)
Safety & Active Defense
Derech Eretz (דֶּרֶךְ אֶרֶץ)
Ethics, Truth & Human Dignity
Shomer (שׁוֹמֵר)
Stewardship of Attention
Hanhagah (הַנְהָגָה)
Culture Over Switches: Connecting rules to care

🛡️ Cyber Hygiene Best Practice in the Home

Passwords, PINs, and secret safe-words should never be written down on digital pages or printables. We use a checkbox below to confirm your family safe-word is established verbally without writing it down.

Young Kids & Elementary School

Building foundational safety habits, open communication, and trusted boundaries

Rule 01 • Bitchon (בִּטָּחוֹן)

The "Digital Front Door" Rule

Venishmartem (וְנִשְׁמַרְתֶּם) — Physical Boundaries

Just as young children learn never to open the front door to strangers, they need simple, clear rules for online interaction. Frame device safety as an act of caring for oneself (Venishmartem [וְנִשְׁמַרְתֶּם]) rather than an arbitrary restriction.

Rule 02 • Bitchon (בִּטָּחוֹן)

The Family Safe-Word Protocol

Identity Defense Against Scams

Establish a secret family code word verbally with your children. Teach them that if anyone ever contacts them claiming to represent a parent, school, or emergency—or if an unexpected message arrives—they must ask for the safe-word before taking action.

Rule 03 • Shomer (שׁוֹמֵר)

Shared Spaces & Mindful Tech

Stewardship of Attention & Household Space

Keep screen use strictly in communal family areas like the living room or kitchen table rather than bedrooms. Communal screen placement fosters natural openness, healthy habits, and prevents isolated scrolling.

Middle & High School Teens

Cultivating critical thinking, ethical AI habits, and digital dignity

Ethics • Derech Eretz (דֶּרֶךְ אֶרֶץ)

Digital Shmirat HaLashon (שְׁמִירַת הַלָּשׁוֹן)

Kavod (כָּבוֹד) — Human Dignity in Group Chats

Messaging groups (WhatsApp, iMessage) can easily become spaces where gossip or exclusion spreads. Enforce the "Pause Before Sharing" rule: never forward private screenshots, embarrassing photos, or unverified rumors.

Academic Integrity • Emet (אֱמֶת)

Ethical AI in Schoolwork

Generative AI as a Learning Partner

Generative AI tools (ChatGPT, Claude) should be used as study tutors or brainstorming partners—never to generate assignments directly without disclosure. Teach teens never to enter personal family data or photos into public AI models.

Defense • Bitchon (בִּטָּחוֹן)

Cloned Voices & Emergency Scams

Verifying AI Voice Impersonations

AI voice cloning can mimic a family member claiming to be in distress. Teach teens that if they ever receive an urgent call demanding money or action, they must hang up, call the relative back directly at their normal number, or request the family safe-word.

Family Scam Defense Reference Matrix

Quick-reference guide for navigating urgent distress scams, voice cloning, and group chat rumors

Threat Scenario What It Looks Like Unbreakable Family Rule
Urgent Impersonation Scams Text or email claiming to be clergy, teacher, or friend asking for gift cards, Zelle, or immediate funds. Verify by Phone: Never send money or codes based on text/email. Call the official number directly.
AI Voice / Distress Calls A panic call using cloned voice claiming a child or relative needs bail, emergency cash, or instant help. Ask for Safe-Word: Hang up immediately and call the relative back directly at their normal phone number.
Group Chat Rumors & Gossip Emotionally charged posts, unverified community alerts, or group chat drama. Pause Before Sharing: Verify before forwarding. Protect people's dignity (Kavod [כָּבוֹד]) online.
🔒 Client-Side Only: Zero data is stored or transmitted.