Cybersecurity Risk Assessment and Management in Non-Profit Organizations
Author: Dr. Anna Neya Kazanskaia
Publisher: NEYA Global Publishing
Article | NEYA Global Journal of Non-Profit Studies
Year: 2025
ORCID: https://orcid.org/0009-0009-5669-1676
DOI: https://doi.org/10.64357/neya-gjnps-cbr-scr-es-53
This material forms part of the NEYA Global knowledge architecture. Institutional, organizational, professional, training, consulting, curriculum, program design, or implementation use requires an active license from NEYA Global
Explore Architecture →
Module Overview →
Request Institutional Access →
About the Article
Cybersecurity risk assessment and management are essential for non-profit organizations to protect sensitive data, maintain operational continuity, and preserve stakeholder trust. This article provides a structured analysis of how non-profits can identify assets, assess threats, evaluate vulnerabilities, and prioritize risks using systematic methodologies. It examines frameworks such as NIST Cybersecurity Framework, ISO 27001, and COBIT, and highlights practical tools including asset inventories, vulnerability checklists, and risk matrices. Case studies illustrate challenges posed by phishing and ransomware, while the discussion emphasizes continuous monitoring, policy review, and staff training. By integrating theoretical frameworks with actionable practices, the article offers guidance for both academics and practitioners aiming to enhance digital resilience in resource-constrained organizations.
Key Topics
- Cybersecurity risk assessment in non-profits
- Vulnerability and threat analysis
- NIST Cybersecurity Framework and ISO 27001
- Risk prioritization and management tools
- Staff training and continuous monitoring
- Digital resilience strategies
Suggested Citation
Kazanskaia, A. N. (2025). Cybersecurity Risk Assessment and Management in Non-Profit Organizations. NEYA Global Journal of Non-Profit Studies. Neya Global Publishing. https://doi.org/10.64357/neya-gjnps-cbr-scr-es-53
References
| Clark, J. (2019). Action planning for cybersecurity in small organizations. Journal of Information Security Management, 7(2), 55-67. | ||||
| Cybersecurity Journal. (2021). Asset inventories and vulnerability assessment in small organizations. Cybersecurity Journal, 5(3), 14-26. | ||||
| Doe, A. (2021). Risk prioritization in digital environments. Computers & Security, 104, 102211. https://doi.org/10.1016/j.cose.2021.102211 | ||||
| Garcia, M. (2020). Cost-benefit approaches to cybersecurity investment. Information Systems Frontiers, 22(4), 993-1006. | ||||
| Kazanskaia, A. N. (2025). Cybersecurity Essentials. NEYA Global Publishing. https://doi.org/10.64357/cybersecurity-essentials-2025 | ||||
| Kazanskaia, A. N. (2025). Tech: Legal and Moral Issues. NEYA Global Publishing. https://doi.org/10.64357/tech-legal-moral-issues-2025 | ||||
| Kazanskaia, A. N. (2025). Guide to Digital Transformation. NEYA Global Publishing. https://doi.org/10.64357/guide-to-digital-transformation-2025 | ||||
| Kazanskaia, A. N. (2025). Technology Tools for Efficiency & Impact. NEYA Global Publishing. https://doi.org/10.64357/technology-tools-2025 | ||||
| Kazanskaia, A. N. (2025). Understanding Cyber Threats in Non-Profit Organizations. NEYA Global Journal of Non-Profit Studies. https://doi.org/10.64357/neya-gjnps-cbr-scr-es-52 | ||||
| Kazanskaia, A. N. (2025). Security Protocols and Best Practices for Non-Profit Organizations. NEYA Global Journal of Non-Profit Studies. https://doi.org/10.64357/neya-gjnps-cbr-scr-es-54 | ||||
| Johnson, T. (2021). Vulnerability assessment practices in non-profits. Nonprofit Technology Review, 9(1), 33-47. | ||||
| Williams, L. (2021). Continuous monitoring and adaptive risk management. Journal of Cyber Policy, 6(1), 78-92. | ||||
