Cybersecurity Tabletop Exercises
A collection of realistic cybersecurity scenarios that staff can work through together to practice responding to incidents, assess existing protections, and identify areas for improvement.
How to use these exercises:
Begin by reviewing your organization’s current cybersecurity practices, including staff training, policies, and procedures. Then, read through a cybersecurity incident that your nonprofit could encounter.
Discuss what your team would do. The purpose isn’t to choose the safest-looking answer. It’s to work through what would realistically happen at your organization, based on how staff currently operate.
Reflect on how your organization handled the scenario. Use the Cybersecurity Starter Kit to help address gaps and strengthen your organization’s cybersecurity practices.
Choose your Scenario:
The Fake Donor
A generous donation comes with unusual requests.
The Fake CRA Notice
An urgent tax notice demands immediate action.
The Fake E-Transfer
A payment notification may not be what it seems.
The Compromised Board Email
A trusted board member’s account sends an unusual request.
The Fake Microsoft Login
A document-sharing request leads to an imitation login page.
The AI Meeting Notetaker
An AI assistant joins a confidential meeting. Who controls what it records, stores, and shares?
Ready to take the next step?
Use what you’ve learned to strengthen your organization’s cybersecurity practices with the Cybersecurity Starter Kit.
English 
French 
Chinese 
Spanish 
Ukrainian