{"id":39064,"date":"2026-11-12T11:38:51","date_gmt":"2026-11-12T16:38:51","guid":{"rendered":"https:\/\/knowledgeflow.org\/?p=39064"},"modified":"2026-11-12T12:18:37","modified_gmt":"2026-11-12T17:18:37","slug":"cyber-duty-guide-for-nonprofit-board-members","status":"publish","type":"post","link":"https:\/\/knowledgeflow.org\/zh\/cyber-duty-guide-for-nonprofit-board-members\/","title":{"rendered":"\u300a\u7f51\u7edc\u804c\u8d23\u300b\u7b80\u4ecb\uff1a\u9762\u5411\u975e\u8425\u5229\u7ec4\u7ec7\u8463\u4e8b\u4f1a\u6210\u5458\u7684\u514d\u8d39\u7f51\u7edc\u5b89\u5168\u76d1\u7763\u6307\u5357"},"content":{"rendered":"

When was the last time cybersecurity came up at your nonprofit’s board meeting?<\/strong><\/p>\n\n\n\n

Serving on a nonprofit board without pay does not, by itself, remove your legal responsibilities as a director.<\/strong> Under Ontario’s Not-for-Profit Corporations Act<\/em> and the federal Canada Not-for-profit Corporations Act<\/em>, directors are expected to act in their organization’s best interests and exercise reasonable care, diligence, and skill. Cybersecurity oversight is one application of these broader governance responsibilities.<\/p>\n\n\n\n

Boards regularly discuss budgets, fundraising, programs, and organizational risks. But cybersecurity can be overlooked, even though a cyber incident could affect an organization’s finances, essential services, confidential information, and community trust.<\/p>\n\n\n\n

To help nonprofit directors navigate these responsibilities, \u77e5\u8bc6\u6d41\u7f51\u7edc\u5b89\u5168\u57fa\u91d1\u4f1a<\/a> has introduced Cyber Duty<\/a>: A Cybersecurity Oversight Guide for Nonprofit Board Members.<\/strong><\/p>\n\n\n\n

This free resource helps board members understand what cybersecurity oversight looks like and how to incorporate it into their existing governance responsibilities.<\/p>\n\n\n\n

You Don’t Need to Be a Cybersecurity Expert<\/h2>\n\n\n\n

Many nonprofit board members serve as volunteers, and not every organization has access to dedicated IT staff or cybersecurity specialists.<\/p>\n\n\n\n

Cyber Duty recognizes these realities and explains that directors don’t need to manage technology themselves. Instead, they should understand significant risks, ask informed questions, support appropriate safeguards, and follow up on important concerns.<\/p>\n\n\n\n

Practical Tools for Your Next Board Meeting<\/h2>\n\n\n\n

Cyber Duty goes beyond explaining responsibilities. It includes four ready-to-use tools to help nonprofit boards put oversight into practice:<\/p>\n\n\n\n