Loading...
Resources
A catalogue of resources, each reviewed by the CCNDR team. Narrow by topic, type, skill level, role, or cost.
Showing 10 resources - updated October 30, 2026
A monitoring and evaluation framework from international nonprofit The Engine Room featuring full and light assessment approaches, indicators, and pre/post survey templates to help organizations measure the effectiveness of cybersecurity readiness and peer-support programs.
An open-source professional security auditing framework developed by Internews (Security Auditing Framework and Evaluation Template for Advocacy Groups) that equips technical practitioners to conduct tailored, capacity-sensitive cybersecurity assessments for small civil society organizations.
A practical, people-centric cybersecurity guide published by The Nonprofit Hive that breaks organizational protection into four manageable priorities for small and medium-sized nonprofits: identity protection, asset inventory, access control, and a supportive security culture.
A nonprofit organization that develops the globally recognized CIS Critical Security Controls and CIS Benchmarks, providing free, consensus-based best practices for securing IT systems and data.
An international nonprofit foundation producing free, open-source documentation, tools, and standards on web and application security for organizations building or procuring digital platforms.
A National Standard of Canada providing an equity-driven data governance framework tailored specifically for nonprofits and organizations delivering community and human services.
A National Standard of Canada outlining requirements for granting and controlling third-party access to organizational data. Applicable to not-for-profit organizations developing vendor-management policies, managed service provider contracts, and cloud procurement reviews.
A free, bilingual National Standard of Canada specifying minimum requirements for protecting data at rest, in motion, and in use across endpoints, mobile devices, and cloud environments. Provides foundational guidance for nonprofits handling sensitive donor or client data.
A practical, technology-agnostic framework designed to help community and human-service nonprofits assess their capabilities across digital tools, data practices, cybersecurity, communications, AI readiness, and digital leadership.
Canada’s National Standard for baseline cybersecurity controls for small and medium-sized organizations with up to 500 employees. Structured in two tiers (entry and mature), it serves as the formal standard underlying CyberSecure Canada certification and provides a practical benchmark for nonprofits.