Typical threats
- Donation and grant-payment diversion
- Executive impersonation
- Excess volunteer and former-worker access
CyberPrimer industry track
Cybersecurity Awareness Training for Nonprofits
Address donation fraud, executive impersonation, volunteer access, grant scams, cloud accounts, and limited-IT-resource risks.
Employee groups at risk
- Executives and board-facing staff
- Fundraising and grants
- Volunteers and program personnel
- Finance and administration
Training topics
- Donation and grant verification
- Volunteer access hygiene
- Cloud-account security
- Fast incident reporting with limited IT resources
Example scenario
A message using a director’s writing style requests an urgent change to grant-payment details. The employee must independently verify the request and retain normal approvals.
Regulatory and contractual considerations
- Donor and beneficiary privacy
- Grant, funder, and contractual security clauses
- State fundraising, privacy, and breach-notification duties
What managers can track
- Assigned blueprint and employee risk tier
- Completion, score, and topic performance
- Remediation and fresh retest status
- Question-bank and configuration versions
Sample evidence
See the training and the record it creates.
Evaluation reports and certificates are visibly marked SAMPLE and are not valid training or compliance evidence.
Regulatory applicability depends on the organization’s activities, location, contracts, data, and professional status. CyberPrimer provides awareness training and documentation – not legal advice, certification, or a guarantee of compliance. Training can support the security-awareness component of a broader compliance program; training alone does not establish compliance.