Cybersecurity governance is a board priority for nonprofits

For nonprofit organizations, cybersecurity is more than a back-office technology concern.

The organization may be highly dependent on technology, but not adequately prepared to manage nonprofit cybersecurity risk.

Boards should ask practical questions such as the following: Who in the organization owns cybersecurity risk?

They are designed to clarify ownership, strengthen nonprofit board cybersecurity oversight and create a common understanding of cybersecurity risk management.

Where nonprofits should focus Nonprofits do not have to solve every cybersecurity problem at once.