Digital security training and policy for nonprofits
Staff use weak passwords, share sensitive files over personal channels, and have no shared understanding of digital risks — your organisation is more exposed than you realise.
What you'll achieve
A digitally security-conscious team with clear policies and practical habits that reduce the risk of data breaches, phishing, and unauthorised access.
How a Nonprofit Builder consultant helps
- Assess your current digital security posture, develop a proportionate security policy, and deliver a practical training session covering the most critical risks for your context.
Key deliverables
- Digital security risk assessment, security policy, staff training session, password and device management guidance, incident response protocol.
Related projects
More from Technology & digital tools
AI tools assessment & policy development
“Staff are using AI tools informally and differently — with no guidance on data privacy, appropriate use, or how to get value from them responsibly.”See project
CRM selection & implementation
“Donor and stakeholder data is scattered across spreadsheets, inboxes, and individual staff members' heads — relationships fall through the cracks and nobody has a complete picture.”See project
Digital transformation strategy & roadmap
“You watch other organisations embracing digital tools and AI while you feel overwhelmed and left behind — there is no strategy and every change feels ad hoc.”See project
Often paired with
Digital safeguarding policy
“Your safeguarding policies say nothing about online risks — staff are communicating with beneficiaries over WhatsApp, social media, and personal email with no guidance at all.”See project
Safeguarding risk assessment & mitigation planning
“You know safeguarding risks exist in your programmes and operations, but you have never systematically identified them or worked out how they should be mitigated.”See project
From the resource library
Free tools and guides to get started
- 12.1C155
The Charity Digital Code of Practice 2025
A voluntary code of good practice that helps UK charities benchmark digital progress and make digital decisions. It sets out 8 principles: leadership, user led, culture, strategy, data, skills, risk and ethics, and adaptability. Separate editions exist for charities with income above and below £1 million. The 2025 update adds a data principle, AI guidance across all principles, tips on buying digital tools, and stronger cyber security and accessibility sections.
Start hereCurrentKey manual or guideFree - 12.4C166
Security in a Box: Digital Security Tools and Tactics
A free online toolkit on digital security for civil society groups at risk. It has 2 parts. Tactics guides explain basic practices such as strong passwords and protection from malicious software. Tool guides give step by step instructions to install, set up and use security software and services. A global network of activists, trainers and security experts helped build it. Users follow the guides to secure devices, accounts and communications.
Start hereCurrentKey online resourceFree