Once Again! Do Nonprofit Directors Face Cyber Security Risks?
By: Eugene Fram Free Digital Photo
Viewer Favorite: Updated & Expanded
The cyber security (CS) debacles faced by Target, Sony Pictures and others may seem far afield from the concerns of nonprofit directors, except for the giants in the area, like AARP. However, think about this hypothetical scenario.
A group of high school students hacked into the computer system of a local nonprofit offering mental health services and gain access to records of clients, perhaps even placing some of the records of other teenagers on the internet.
What due care obligations did the board need to forestall the above situation? A move to recruit directors with special expertise in information technology or cyber security would be nonproductive. A nonprofit director has broader responsibilities such as the overview of management, approval of budgets, fostering management and staff growth etc. Similarly, when social media became a prominent issue a few years ago, boards debated the advisability of seeking directors with that specific kind of background. Today, a consultant with management experience in the area is likely needed to provide guidance to directors on these social media issues.