Digital-safety & online-reputation mgmt.
Assesses the management of the organization's digital presence for safety and reputation. Scope includes all official channels (website, email newsletters, social media, messaging apps like WhatsApp/Telegram, and fundraising platforms). It covers digital safety (account security, impersonation, safeguarding disclosures, data protection) and reputation management (content verification, sentiment monitoring, complaints handling), ensuring ethical online conduct and timely response to issues.
| Metric | Online complaint response time & MFA adoption |
|---|---|
| Target | ≤48h / 100% MFA |
| Frequency | Monthly |
| Method | Time from receipt to acknowledgement; % of accounts with MFA enabled. |
| Unit | Hours / Percentage |
Level 1: Initial/Ad-hoc
Digital presence is ad-hoc. No policy exists. No account security controls (e.g., shared passwords, no MFA). Responses are reactive or non-existent.
Level 2: Developing
Basic guidelines exist but are not consistently enforced. Designated individuals manage accounts, but without formal training or MFA. The organization is reactive to online issues.
Level 3: Established
Compliant: Formal policy approved and trained. Account register exists with named owners and MFA enabled. Queries are acknowledged within 48h. Safeguarding escalation route is defined.
Level 4: Advanced
Advanced: Proactive monitoring with sentiment analysis. Crisis communication plan is tested annually via drills. Serious incident decision logging is active. >90% SLA adherence.
Level 5: Optimizing
Excellence: Digital safety is strategically integrated with culture of Iḥsān. Independent reviews of digital risk are conducted. Organization leads in ethical online conduct (Adab) and community trust (Amānah).
Organisation Types
By Organisation Size
| Size | Applicability | Notes |
|---|---|---|
| Micro | exempt | Formal RACI matrices, strict 48-hour SLAs, and version-controlled policies are disproportionate for volunteer-run groups. |
| Small | partial | Scaled down to basic MFA, simple social media guidelines, and safeguarding escalation; strict SLAs and complex RACI are not expected. |
| Medium | full | |
| Large | full | |
| Major | full |
Applicable When
- The organization has an online presence (website, social media, etc.)
- The organization interacts with the public or stakeholders online
- The organization uses digital communication channels
Not Applicable When
- The organization has absolutely NO online presence or engagement whatsoever.
- The organization is entirely internally focused and has no external stakeholders or beneficiaries.
Related Criteria
Discussion (1)
📋 **Version updated: 1.0.0 → 2.9.7** **Changes:** Full import from mizan-297.json
Sign in to post a comment.