A nonprofit applying for a city arts grant has a Form 990 on a public nonprofit-research site, and a council member wants the group's private donor roll. What is in-scope for PORP-style collection?
Select an answer to reveal the explanation.
Short Explanation
A public Form 990 is the charity's filed report card; a private donor roll is the locked cabinet. Use the filing class that is already published. Pretexting, breach replay, and fake auditor visits are not OSINT.
Full Explanation
Public charity filings such as Form 990-class documents on nonprofit-research sites are in-scope business OSINT for civic grant due diligence. Non-public donor rolls are not a PORP collection target. Pretexting staff, replaying breached credentials, and impersonating auditors leave public-source work. The report cites the public filing and states that private donor lists were not collected.