Connecting nonprofits to lead with cyber confidence
The Nonprofit Cyber Impact Hub is a learning and discovery platform that helps nonprofit professionals build cyber readiness, with trusted guidance, tools, and training curated for the sector. Start your cyber journey today!
CCCS – Mitigating Cyber Threats with Limited Resources: Guidance for Civil Society
Joint guidance developed by the Canadian Centre for Cyber Security and international partners specifically for civil society organizations. It outlines practical, low-cost measures to protect staff, donors, and operations against common cyber threats.
PracticalOctober 30, 2026
ToolkitAuthoritativeFree
CCCS – Cyber Security Guidance Catalogue
A searchable library of plain-language publications covering topics such as passwords, multi-factor authentication, ransomware, cloud security, and mobile devices. Many guides are concise 1 to 2 page overviews ideal for staff awareness and training.
FoundationalOctober 30, 2026
GuideAuthoritativeFree
Get Cyber Safe – Guide for Small Businesses
A step-by-step cybersecurity guide designed for small organizations operating without dedicated IT teams. It covers essential practices for protecting devices, networks, and sensitive organizational data.
FoundationalOctober 30, 2026
GuideAuthoritativeFree
OPC – Mandatory Breach Reporting Guidance
Official guidance explaining what organizations must do to comply with PIPEDA’s mandatory privacy breach reporting, notification, and recordkeeping requirements.
A bilingual practical guide from Canadian nonprofit Open North offering foundational cybersecurity steps, a self-assessment checklist, audit preparation tools, and third-party vendor evaluation questions for small and medium-sized organizations.
A free HR-focused toolkit developed by Imagine Canada and sector partners that explains the nonprofit threat landscape, workplace security policies, and frameworks like NIST CSF and CIS Controls in accessible language.
A managed cybersecurity awareness and phishing simulation package from CIRA designed specifically for small organizations without dedicated internal IT security staff.
A quick, 10-question self-assessment tool that helps executive directors, board members, and staff evaluate basic cybersecurity habits and identify areas for improvement.