risk management for nonprofits

A team working with a ransomware tabletop facilitator for legal services organizations

Ransomware Tabletop Facilitator for Legal Services Organizations (Incident Ready Decision Gates)

It’s 9:12 a.m. Intake is stacking up, advocates can’t open case files due to the ransomware attack, and the phones won’t stop. Someone forwards a screenshot: a ransom note. The panic doesn’t come from the tech details. It comes from the cyber threat landscape, what your team protects, client safety, confidentiality, and the ability to

Ransomware Tabletop Facilitator for Legal Services Organizations (Incident Ready Decision Gates) Read More »

An image of a team performing nonprofit systems map workshop

The Nonprofit Systems Map Workshop, How to Document Your Real Workflows in 2 Workshops

The intake queue is exploding. A partner handoff failed again. A funder report is due Friday, and the numbers don’t reconcile with last quarter’s spreadsheet. When that happens, it’s tempting to hunt for a new tool. But the tool isn’t the work. The work is the flow of decisions, handoffs, approvals, and sensitive information that

The Nonprofit Systems Map Workshop, How to Document Your Real Workflows in 2 Workshops Read More »

A team working with a fractional CISO for court navigators

Fractional CISO for Court Navigators (Reduce Privacy Risk, Build Trust)

A navigator is sitting at a small table outside a courtroom. The line is long. The questions are urgent. Someone leans in and quietly shares details about a pending eviction, a protective order, an immigration deadline, or a benefits cutoff. In that moment, your program is running on trust. Privacy risk isn’t a side issue.

Fractional CISO for Court Navigators (Reduce Privacy Risk, Build Trust) Read More »

A group people of taking part in a data breach response plan for legal nonprofits

Data Breach Response Plan For Legal Nonprofits (First 72 Hours, Clear Roles, No Guesswork)

A staff member sees a strange login alert, then intake goes down. The phones start ringing, the web form spins, and someone says the quiet part out loud, client safety might be at risk. This is the constraint justice-focused legal nonprofits live with, a small team, a tight budget, high stakes handling sensitive information, and

Data Breach Response Plan For Legal Nonprofits (First 72 Hours, Clear Roles, No Guesswork) Read More »

Breach response consulting for civil justice organizations (board-ready decisions under pressure)

Your intake queue is already overflowing. A court partner needs an answer today. A board member forwards a strange email from a staff account. Then your IT lead says the words you don’t want to hear: “We suspect unauthorized access to data.” This is when data breach management sets the stage for your organization’s response.

Breach response consulting for civil justice organizations (board-ready decisions under pressure) Read More »

An image of a team using legal services case management software

Legal Services Case Management Software For Justice-Focused Teams

You are not chasing billable hours. You are trying to keep people safe, housed, and informed, often with less staff and more demand than feels fair. Legal services case management software, a vital subcategory of legal practice management software, is one of the few tools that can actually calm the chaos and boost efficiency. At

Legal Services Case Management Software For Justice-Focused Teams Read More »

Cyber risk consulting for legal partner organizations (shared responsibility that ends finger pointing)

The law firm cybersecurity intake queue is overflowing with referrals, complicating risk management. A referral partner emails a spreadsheet “just for today.” A volunteer needs access “right now.” Then a phishing email lands, someone clicks, and suddenly you’re in the worst meeting of the year. After an incident, the first question is often: “Whose fault

Cyber risk consulting for legal partner organizations (shared responsibility that ends finger pointing) Read More »

CTO Input helping with technology vendor selection for justice organizations

Technology Vendor Selection for Justice Organizations (Avoid Bad Fits and Hidden Costs)

Your intake queue is full. A grant report is due. Someone asks, “Can the new mission-critical system do conflict checks and keep client notes secure?” The vendor says yes, of course. Two months later, staff are copying and pasting between tools, numbers don’t match, and the “simple add-on” is now a line item you didn’t

Technology Vendor Selection for Justice Organizations (Avoid Bad Fits and Hidden Costs) Read More »

Cybersecurity strategy for capacity building organizations (security priorities funders will respect)

At capacity building organizations focused on workforce development, your training team is onboarding another cohort. A partner sends a spreadsheet of contacts. A funder wants a progress update, and the numbers don’t reconcile. Then someone forwards a “DocuSign” email that wasn’t DocuSign at all. Capacity building organizations sit in a tricky middle. You’re not always

Cybersecurity strategy for capacity building organizations (security priorities funders will respect) Read More »