Cybersecurity for Nonprofits
Protect your mission, your money, and your donors’ data — no IT degree required.
For: Nonprofit staff, volunteers, and leaders
What you’ll learn
- Spot phishing and social-engineering attacks before you click
- Lock down accounts with strong passwords, a password manager, and MFA
- Stop business email compromise (BEC) wire fraud and protect donor & volunteer PII
- Respond to ransomware and a suspected breach with a calm, basic incident plan
Screen your volunteers for $5
VolunteerBadge runs FCRA-compliant background checks for just $5 — with identity verification built in. No monthly fees, no contracts.
Create a free account →Course outline
- 1
Why nonprofits are a target
5 min
- 2
Phishing & social engineering
6 min
- 3
Passwords, password managers & MFA
6 min
- 4
Ransomware, malware & backups
6 min
- 5
Money & email: stopping BEC wire fraud
6 min
- 6
Protecting donor & volunteer data
5 min
- 7
When something goes wrong: incident response basics
5 min
Sources & further reading
- Cybersecurity & Infrastructure Security Agency (CISA) — Four Cybersecurity Essentials for Businesses
- Federal Trade Commission — Cybersecurity for Small Business
- Federal Bureau of Investigation — Business Email Compromise
- National Institute of Standards and Technology (NIST) — Digital Identity Guidelines — Passwords (SP 800-63B)
- National Cybersecurity Alliance — Online Safety Basics
This course is educational and provides general information about the Fair Credit Reporting Act and volunteer-screening best practices. It is not legal advice. Laws vary by state and change over time — consult a qualified attorney about your organization’s specific obligations.

