Thanks for taking a few minutes to complete this Cyber Readiness Quiz!

This quiz is quick, easy, and designed to help you (and your team) see where you're strong — and where you might need a little more protection.

We’ll start by collecting a few details below so we can send you your results or helpful resources.

Your answers are private and will only be used to support you and your organization’s security.

First Name *

Last Name

Email *

Phone

Organization

Who is responsible for cybersecurity at your org?

We have a dedicated in-house person or team.

It is outsourced to a third party.

I think it's just whoever notices issues.

It is not assigned.

I do not know.

Has anyone at your organization ever received a suspicious email that almost fooled them?

Yes

Not sure

If someone emailed pretending to be a leader asking for money transfer, would your team know how to verify it?

Yes, we have a process

No clear process

I’m not sure

Are employees and volunteers required to use unique passwords for different systems?

Yes

Not sure

Is Multi-Factor Authentication (a second login step) turned on for all important accounts (email, donor systems, finance tools)?

Yes

Not sure

Does your organization have a written cybersecurity policy that every staff member has signed?

Yes

I think so, but I haven't seen it

Are laptops, tablets, and phones that access nonprofit data encrypted?

Yes, all devices

Some devices

Not sure / No

Do you provide cybersecurity training (even short refreshers) to all staff and volunteers?

Yes, every year

Yes, but not regularly

Not sure

How often are system backups done for important data (donor info, finances, grant applications)?

Daily or weekly

Monthly

Rarely / I don't know

If a cyberattack hit today, does your organization have a clear, tested emergency response plan?

Yes, documented and tested

We have a rough plan

No plan / Not sure

Does leadership (Executive Director, Board, CFO) actively oversee cybersecurity, or is it left only to IT?

Leadership is directly involved

Only IT handles it

Not sure

Do you audit who has access to sensitive systems (CRM, bank accounts, grant portals) at least once a year?

Yes, we review and remove access

Rarely / When someone leaves

Never / Not sure

How often does your IT vendor or staff patch and update software systems?

Weekly or monthly

Only during problems

Not sure

Are 3rd-party vendors (payment processors, consultants) required to meet security standards before working with your nonprofit?

Yes, always

Sometimes

Never / Not sure

Have you ever tested your organization's ability to detect a fake phishing email?

Yes, we run tests or drills

No tests, only real-world mistakes

Not sure

How confident are you that your nonprofit could continue operating normally if hit by a major cyberattack?

Very confident

Somewhat confident

Haven't thought about it