risk management for nonprofits

Implementing A Cybersecurity Baseline For Justice Nonprofits (Minimum Controls That Hold Up Under Pressure)

Your team carries stories, full of sensitive data, that can’t safely “leak.” Names. Addresses. Court filings. Immigration status. Shelter locations. Notes from an intake call that someone trusted you with, once, at their worst moment. A cyber incident in a justice nonprofit isn’t just an IT problem. It can create real-world harm, put staff at […]

Implementing A Cybersecurity Baseline For Justice Nonprofits (Minimum Controls That Hold Up Under Pressure) Read More »

An image of a computer where justice nonprofit offboarding takes place

justice nonprofit offboarding checklist: Offboarding that actually protects clients

The intake queue is already too long. A clinic is tomorrow. A funder report is due Friday. Then someone leaves, planned or not, and your team realizes the quiet risk: they still have access to client files, shared inboxes, and partner portals. Offboarding isn’t an HR formality. In legal aid, court support, and justice-serving nonprofits,

justice nonprofit offboarding checklist: Offboarding that actually protects clients Read More »

A team navigating through Legal Services Ransomware Tabletops

The Benefits of Legal Services Ransomware Tabletops (Board-Ready Decision Gates)

It’s 9:12 a.m. Intake is stacking up, advocates can’t open case files due to the ransomware attack, and the phones won’t stop. Someone forwards a screenshot: a ransom note. The panic doesn’t come from the tech details. It comes from the cyber threat landscape shaped by legal industry trends, cybersecurity for what your team protects,

The Benefits of Legal Services Ransomware Tabletops (Board-Ready Decision Gates) Read More »

A team cyber reviewing a risk reporting template for justice services organizations

Cyber Risk Reporting Template for Justice Services Organizations

The intake queue is exploding. A partner asks for an update. A board packet is due. Then someone forwards a strange email, or a staff laptop goes missing, and suddenly the question isn’t “Do we have antivirus?” It’s “Could a client get hurt because we lost control of their information?” This is why a cyber

Cyber Risk Reporting Template for Justice Services Organizations Read More »

A team working with a ransomware tabletop facilitator for legal services organizations

Ransomware Tabletop Facilitator for Legal Services Organizations (Incident Ready Decision Gates)

It’s 9:12 a.m. Intake is stacking up, advocates can’t open case files due to the ransomware attack, and the phones won’t stop. Someone forwards a screenshot: a ransom note. The panic doesn’t come from the tech details. It comes from the cyber threat landscape, what your team protects, client safety, confidentiality, and the ability to

Ransomware Tabletop Facilitator for Legal Services Organizations (Incident Ready Decision Gates) Read More »

An image of a team performing nonprofit systems map workshop

The Nonprofit Systems Map Workshop, How to Document Your Real Workflows in 2 Workshops

The intake queue is exploding. A partner handoff failed again. A funder report is due Friday, and the numbers don’t reconcile with last quarter’s spreadsheet. When that happens, it’s tempting to hunt for a new tool. But the tool isn’t the work. The work is the flow of decisions, handoffs, approvals, and sensitive information that

The Nonprofit Systems Map Workshop, How to Document Your Real Workflows in 2 Workshops Read More »

A team working with a fractional CISO for court navigators

Fractional CISO for Court Navigators (Reduce Privacy Risk, Build Trust)

A navigator is sitting at a small table outside a courtroom. The line is long. The questions are urgent. Someone leans in and quietly shares details about a pending eviction, a protective order, an immigration deadline, or a benefits cutoff. In that moment, your program is running on trust. Privacy risk isn’t a side issue.

Fractional CISO for Court Navigators (Reduce Privacy Risk, Build Trust) Read More »

A group people of taking part in a data breach response plan for legal nonprofits

Data Breach Response Plan For Legal Nonprofits (First 72 Hours, Clear Roles, No Guesswork)

A staff member sees a strange login alert, then intake goes down. The phones start ringing, the web form spins, and someone says the quiet part out loud, client safety might be at risk. This is the constraint justice-focused legal nonprofits live with, a small team, a tight budget, high stakes handling sensitive information, and

Data Breach Response Plan For Legal Nonprofits (First 72 Hours, Clear Roles, No Guesswork) Read More »