Connecting nonprofits to lead with cyber confidence

The Nonprofit Cyber Impact Hub is a learning and discovery platform that helps nonprofit professionals build cyber readiness, with trusted guidance, tools, and training curated for the sector. Start your cyber journey today!

Browse all resources Filter by your role

Asked often:

Browse

Cybersecurity topics

Four areas that cover most of what a small nonprofit needs.

All topics

IncidentsWhat to do in the first hour, and who has to be told.10 resources Risk assessmentFind out what you actually hold and what would hurt to lose.7 resources Training & Skill DevelopmentPhishing, passwords, and safe habits for staff and volunteers.23 resources Policy and RegulationAcceptable use, data retention, vendor review, board reporting.5 resources

Trusted sources

Authoritative Canadian Guidance

Published by government or sector bodies, and free to use.

GuideAuthoritativeFree

CCCS – Mitigating Cyber Threats with Limited Resources: Guidance for Civil Society

Joint guidance developed by the Canadian Centre for Cyber Security and international partners specifically for civil society organizations. It outlines practical, low-cost measures to protect staff, donors, and operations against common cyber threats.

PracticalOctober 30, 2026

ToolkitAuthoritativeFree

CCCS – Cyber Security Guidance Catalogue

A searchable library of plain-language publications covering topics such as passwords, multi-factor authentication, ransomware, cloud security, and mobile devices. Many guides are concise 1 to 2 page overviews ideal for staff awareness and training.

FoundationalOctober 30, 2026

GuideAuthoritativeFree

Get Cyber Safe – Guide for Small Businesses

A step-by-step cybersecurity guide designed for small organizations operating without dedicated IT teams. It covers essential practices for protecting devices, networks, and sensitive organizational data.

FoundationalOctober 30, 2026

GuideAuthoritativeFree

OPC – Mandatory Breach Reporting Guidance

Official guidance explaining what organizations must do to comply with PIPEDA’s mandatory privacy breach reporting, notification, and recordkeeping requirements.

FoundationalOctober 30, 2026

Start here

The starter pack

Four moves, in order, each with the one resource that gets it done.

Browse everything

Get the basics in place

Practical first steps, a quick self-check, and the questions to ask your vendors.

Use this

ToolkitFreeOpen North – Cybersecurity for Small and Medium-Sized OrganizationsFoundational

Put your policies in writing

Understand the threats nonprofits face and set workplace rules your team can follow.

Use this

ToolkitFreeHR Intervals – Cybersecurity Essentials for NonprofitsFoundational

Train your team

Awareness training and phishing simulations built for teams without in-house IT.

Use this

Course

Paid resource

CIRA – Cybersecurity Awareness Training for Small TeamsFoundational

See where you stand

Ten quick questions to help leaders, board members, and staff spot gaps.

Use this

ToolFreeGet Cyber Safe – Cyber Security Check-UpFoundational

Asked often:

Browse

Cybersecurity topics

Four areas that cover most of what a small nonprofit needs.

All topics

IncidentsWhat to do in the first hour, and who has to be told.Risk assessmentFind out what you actually hold and what would hurt to lose.Training & Skill DevelopmentPhishing, passwords, and safe habits for staff and volunteers.Policy and RegulationAcceptable use, data retention, vendor review, board reporting.

Trusted sources

Authoritative Canadian Guidance

Published by government or sector bodies, and free to use.

Start here

The starter pack

Four moves, in order, each with the one resource that gets it done.

Browse everything