nonprofit IT leadership

A team learning about a multi factor authentication rollout plan

A Multi Factor Authentication Rollout Plan Staff Will Actually Adopt (Phased, Practical, No Revolt)

Your intake queue is exploding. A grant report is due. A partner needs a file today. Then someone gets phished, or you notice a login from a remote work location no one recognizes, and suddenly MFA becomes urgent. This is where “big bang MFA” goes wrong. Staff get blocked mid-task, workarounds appear, and IT becomes […]

A Multi Factor Authentication Rollout Plan Staff Will Actually Adopt (Phased, Practical, No Revolt) Read More »

An image of a computer where justice nonprofit offboarding takes place

justice nonprofit offboarding checklist: Offboarding that actually protects clients

The intake queue is already too long. A clinic is tomorrow. A funder report is due Friday. Then someone leaves, planned or not, and your team realizes the quiet risk: they still have access to client files, shared inboxes, and partner portals. Offboarding isn’t an HR formality. In legal aid, court support, and justice-serving nonprofits,

justice nonprofit offboarding checklist: Offboarding that actually protects clients Read More »

A team working with a ransomware tabletop facilitator for legal services organizations

Ransomware Tabletop Facilitator for Legal Services Organizations (Incident Ready Decision Gates)

It’s 9:12 a.m. Intake is stacking up, advocates can’t open case files due to the ransomware attack, and the phones won’t stop. Someone forwards a screenshot: a ransom note. The panic doesn’t come from the tech details. It comes from the cyber threat landscape, what your team protects, client safety, confidentiality, and the ability to

Ransomware Tabletop Facilitator for Legal Services Organizations (Incident Ready Decision Gates) Read More »

A team developing a nonprofit cybersecurity plan

Building A Nonprofit Cybersecurity Plan: A Practical 90-Day Launch Program

If you lead a mission-driven nonprofit, you already know this truth: trust is part of the service. Clients share details they may not even tell family. Donors trust you with payment data and private intent. Staff store case notes, benefits documents, safety plans, and court records while juggling too much work. A cyber incident doesn’t

Building A Nonprofit Cybersecurity Plan: A Practical 90-Day Launch Program Read More »

How To Make A Robust Justice Nonprofit Security Plan: 10 controls you can put in place in 90 days

It’s 4:45 p.m. on a Friday. Intake is still piling up. A partner email comes in with a spreadsheet attached, full of names, birthdates, and case notes. Someone forwards it to “whoever can help.” On Monday, a funder report is due, and the numbers don’t match. Meanwhile, you’re thinking a quieter thought you don’t love

How To Make A Robust Justice Nonprofit Security Plan: 10 controls you can put in place in 90 days Read More »

A team working with a fractional CISO for court navigators

Fractional CISO for Court Navigators (Reduce Privacy Risk, Build Trust)

A navigator is sitting at a small table outside a courtroom. The line is long. The questions are urgent. Someone leans in and quietly shares details about a pending eviction, a protective order, an immigration deadline, or a benefits cutoff. In that moment, your program is running on trust. Privacy risk isn’t a side issue.

Fractional CISO for Court Navigators (Reduce Privacy Risk, Build Trust) Read More »

Cybersecurity strategy for capacity building organizations (security priorities funders will respect)

At capacity building organizations focused on workforce development, your training team is onboarding another cohort. A partner sends a spreadsheet of contacts. A funder wants a progress update, and the numbers don’t reconcile. Then someone forwards a “DocuSign” email that wasn’t DocuSign at all. Capacity building organizations sit in a tricky middle. You’re not always

Cybersecurity strategy for capacity building organizations (security priorities funders will respect) Read More »

A team discussing a MFA rollout plan for justice nonprofits

A 14-day MFA rollout plan for justice nonprofits, cut account takeovers without locking out staff or partners

It’s 4:45 p.m. Intake is still climbing. A partner is waiting on a referral handoff. Tomorrow’s court deadline is already too close. Then someone can’t sign in, again, because a password was reset and the reset email went to an old inbox no one checks. This is how account takeovers become a justice problem, not

A 14-day MFA rollout plan for justice nonprofits, cut account takeovers without locking out staff or partners Read More »