Cyber Duty: A Guide for Nonprofit Board Members
You don’t need to be a cybersecurity expert to ask the right questions.
Understand your oversight responsibilities, recognize important cyber risks, and help your organization make informed decisions.
Why does cybersecurity matter to your board?
Cyber incidents can affect more than computers. They can interrupt essential services, expose personal information, create unexpected costs and damage the trust your community places in your organization.
People & Privacy
Protect the information entrusted to your organization.
Community Trust
Support responsible stewardship of donor and client information.
Financial Resources
Understand fraud risks and the costs of disruption.
Service Continuity
Help essential programs continue or recover.
What is the board actually responsible for?
Directors provide oversight. They don’t need to personally configure software, investigate cyberattacks or manage the organization’s IT systems.
The board’s role:
Four questions to bring to your next board meeting
Put oversight into practice
Explore the downloadable tools included in the guide:
Board Discussion Guide
Questions for your next meeting.
Sample Cyber-Risk Report
A simple format for meaningful updates.
Annual Oversight Calendar
Spread important reviews throughout the year.
Incident-Escalation Checklist
Clarify when the board needs to be involved.
Start the conversation at your next board meeting.
Download the free Cyber Duty Guide to explore your oversight role, ask better questions and make informed decisions about cyber risk.
English 
French 
Chinese 
Spanish 
Ukrainian