Use Password 101 Workshop to protect club systems and information through simple, shared security habits and a practiced response.
Where this idea came from
Playbook entry
S-114 · Password 101 Workshop
Theme
Theme 5: Digital, Data & Systems · Subtheme 8: Cybersecurity & Risk
Source material
Current playbook index title and category plus an internally authored detailed-guide draft
Initiative-specific development wave
How this draft was developed
These sources support general principles for digital, data and systems, accessibility, privacy, safety, systems or responsible governance; they are not an endorsement of Password 101 Workshop, a finding that it suits any club or approval of its local design.
Primary references consulted
Rotary Clubs(Rotary International) Used for: Rotary describes club participation through service, friendship, diversity, integrity and leadership, including online participation for people affected by schedules, mobility or distance.
Small business cyber security guide(Australian Signals Directorate's Australian Cyber Security Centre) Used for: A practical security baseline includes multi-factor authentication, software updates, regular tested backups and advice suited to the organisation's actual systems and risk.
Chapter 11: APP 11 Security of personal information(Office of the Australian Information Commissioner) Used for: Entities covered by the Privacy Act must take reasonable steps to protect personal information and destroy or de-identify it when it is no longer needed, subject to lawful retention requirements.
Quick reference guide for responding to data breaches(Office of the Australian Information Commissioner) Used for: Organisations should contain, assess and respond to suspected data breaches, determine applicable notification duties and review the event to reduce recurrence.
Candidate District material
No candidate local guide was used for this version. The current initiative identity and the attributed primary references remain separate.
Theme 5 source-assurance wave
What has been checked
4 current primary pages used by this guide were reopened on 9 August 2026.
4 attributed source claim(s) were mapped to their bounded use in this initiative.
Candidate District material remains separate and does not establish this result.
See each source's scope and limit
Rotary Clubs Supports: Rotary club participation context and the value of accessible online or hybrid participation. Does not establish: Product configuration, legal compliance, local suitability or approval of a named initiative.
Small business cyber security guide Supports: A practical minimum cyber-security baseline for smaller organisations and volunteer-run systems. Does not establish: That the baseline is sufficient for a club's actual risk, system architecture, supplier arrangements or legal obligations.
Chapter 11: APP 11 Security of personal information Supports: Security, access, retention and disposal safeguards where the Privacy Act and APP 11 apply. Does not establish: That a club's controls are reasonable, that the Privacy Act applies or that a particular retention period is correct.
Quick reference guide for responding to data breaches Supports: A proportionate sequence for preparing for and responding to suspected personal-information breaches. Does not establish: Whether an incident is an eligible data breach, who must be notified or the club's legal duties in a specific event.
What still needs a person to confirm
Confirm which privacy, records, safeguarding and other legal duties apply to the club and this local design.
Confirm current ClubRunner or other platform features, permissions, licence settings and supplier instructions in the club's actual account.
Test accessibility and alternative participation routes with affected members rather than inferring conformance from the guide.
Confirm every local fact, starting point, measure, cost, owner and claim before the club decides to proceed.
Resolve any candidate District-source provenance and approval decision without treating the candidate as controlled authority.
The source-verification release gate remains closed.
Checks still on hold
The current Theme 5 index controls the code and title. No unverified or close legacy Digital crosswalk was used as initiative evidence.
The connected Drive refresh returned an internal error on 9 August 2026. No unseen file was inferred or promoted; the 7 August intake, duplicate decisions, quarantines, rights boundaries and public-write permission hold remain in force and no sharing was changed.
Before local delivery, the club must approve the decision, participant choices, access arrangements, privacy and records plan, role boundaries, referral or escalation routes, resource limit and the specific control for this boundary: volunteer capability does not replace professional advice for a serious incident, compromised account, legal duty or complex configuration.
Formal human review has not started. Password 101 Workshop remains an internal initiative-specific draft until all 1,000 initiatives reach the Full-Corpus Review Build and every source, editorial, local-suitability, accessibility and governance gate is resolved.
Still an internal draft: source interpretation, local suitability, accessibility, governance and editorial approval remain open checks.
What could this idea change?
It protects trust by making safer system and information habits part of everyday club work.
It may suit: Members who use or look after club systems and information, including people who need extra help.
Could this work in our club?
Consider Password 101 Workshop when access, passwords, devices, backups or incident responsibilities are unclear.
A club where the club has a defined user need, accountable owner, current platform information, proportionate data plan and a safe way to test and reverse the change.
A club with a real need for practical cyber resilience and capacity to support a needs-led learning session with verified content, active practice and a real transfer task.
A 90-day trial of Password 101 Workshop with a starting point, named participants, a resource ceiling and a scheduled continue, adapt or stop decision.
Before you start
A board-approved brief naming which accounts, devices, data and response capability the club will protect first, the local authority, people affected, fixed constraints, resource ceiling, decision date and stop conditions.
A starting-point record and participant plan suited to a needs-led learning session with verified content, active practice and a real transfer task, with accessible information, voluntary choices and a supported alternative route where needed.
Named delivery, evidence and decision owners, including a person authorised to pause Password 101 Workshop when a safeguard, permission or boundary is not met.
A proportionate check of governing documents, privacy, information security, accessibility, conflicts, safeguarding, work health and safety, records, finance and referral duties for the actual local design.
At the end: At the 90-day review, compare the recorded measures with the starting point, resolve the listed governance holds and tell participants whether Password 101 Workshop will change, continue or stop.
Made for this initiative
Tailored supporting documents
These working documents use the decisions, safeguards and evidence needs of this initiative. Complete them with the people affected and keep the agreed version with the club's project record.
01
Password 101 Workshop User Need and System Boundary Brief
Define the user problem, information flow and excluded uses.
