CTO Input

A team building a vendor incident response plan.

How to Build a Vendor Incident Response Plan (That Works Under Pressure)

A vendor emails: “We’re investigating a possible cybersecurity incident, potentially a supply chain attack.” It’s 4:47 pm. Your intake queue is full, a filing deadline is tomorrow, and staff are already forwarding screenshots to each other. Someone asks, “Who’s supposed to call the vendor?” Another asks, “Do we have to tell funders?” Nobody’s being careless, […]

How to Build a Vendor Incident Response Plan (That Works Under Pressure) Read More »

A team reviewing a one-page intake summary

Stop Making People Repeat Their Story, Add a One-Page Intake Summary That Follows Every Handoff

At 4:45 pm, the intake queue is still long. A partner calls back with a “quick question,” but they don’t have the full context. A supervisor needs an answer that’s safe to stand behind. And the client is asked, again, to re-tell the hardest parts of their life. Repeating the story isn’t just inefficient. It’s

Stop Making People Repeat Their Story, Add a One-Page Intake Summary That Follows Every Handoff Read More »

A Calm Advisor’s Guide to Volunteer Management Software for Legal Nonprofits

It’s the end of the quarter. A critical grant report is due, and your pro bono hours are buried in a dozen different spreadsheets, each one formatted differently. Your pro bono coordinator is frantically trying to reconcile the numbers, while you’re worrying if the sensitive client data attached to those hours is even secure. This

A Calm Advisor’s Guide to Volunteer Management Software for Legal Nonprofits Read More »

A team navigating through Legal Services Ransomware Tabletops

The Benefits of Legal Services Ransomware Tabletops (Board-Ready Decision Gates)

It’s 9:12 a.m. Intake is stacking up, advocates can’t open case files due to the ransomware attack, and the phones won’t stop. Someone forwards a screenshot: a ransom note. The panic doesn’t come from the tech details. It comes from the cyber threat landscape shaped by legal industry trends, cybersecurity for what your team protects,

The Benefits of Legal Services Ransomware Tabletops (Board-Ready Decision Gates) Read More »

A team cyber reviewing a risk reporting template for justice services organizations

Cyber Risk Reporting Template for Justice Services Organizations

The intake queue is exploding. A partner asks for an update. A board packet is due. Then someone forwards a strange email, or a staff laptop goes missing, and suddenly the question isn’t “Do we have antivirus?” It’s “Could a client get hurt because we lost control of their information?” This is why a cyber

Cyber Risk Reporting Template for Justice Services Organizations Read More »

Stop asking clients to repeat their story, set up a single client facts record that feeds every program, reduce re-traumatizing repeats, and cut intake time in 30 days

The intake queue is blowing up, staff are hopping between forms, and someone is asking, again, “Can you tell me what happened?” The client pauses. You can hear the strain in the silence. Your team isn’t trying to be careless. The system is. When a person has to repeat their story across programs, partners, and

Stop asking clients to repeat their story, set up a single client facts record that feeds every program, reduce re-traumatizing repeats, and cut intake time in 30 days Read More »