Why I Don't Like Cybersecurity Awareness Month
If your security plan expires on November 1, it isn't a plan. It's a seasonal flavor.
If your security plan expires on November 1, it isn't a plan. It's a seasonal flavor.
Nonprofit cybersecurity doesn't improve with more checklists and portals. Real change starts with conversations that expose hidden risks, build trust and turn advice into action.
AI is changing the threat landscape. For nonprofits and other under-resourced organizations, panic is a bigger risk than the technology.
Black Hat, DEF CON, and BSidesLV wrapped up this week. As always, a few security nonprofits found their way into the room. But the sector that runs $1.4 to $1.5 trillion through the U.S. economy every year? Still mostly locked out.
What a nonprofit collects, captures, manages, and is responsible for protecting isn't uniform. And in many cases, the sensitivity of that data maps directly back to their unique mission in ways that should fundamentally shape how we approach security for these organizations.
Cybersecurity treats nonprofits as a single category, despite vast differences in mission, data sensitivity, and risk. From animal shelters to domestic violence services to hospitals, each faces a distinct threat landscape.