Protecting your Organization

Are board roles and responsibilities clearly defined?

Strong boards function best when expectations are clear. Do your board members understand their responsibilities, decision-making authority, and role in supporting the organization’s mission?

Are bylaws and governance policies up to date?

Policies become outdated over time. Do your bylaws still reflect current operations, leadership structures, and legal requirements? 

Does the board regularly review organizational performance and risk?

Boards operate best when they are familiar with operational challenges. Is your board aware of the issues that could affect organizational stability?

What are your organization's internal financial controls?

Internal controls are financial management practices used to prevent misuse and misappropriation of assets. Examples include requiring two signatures on a check, or a periodic review by an objective person of the list of all vendors receiving payments from your organization. What are your organizations current policies? 

Are grant funds and other sources of revenue properly tracked?

Clear tracking systems help avoid reporting issues, missed deadlines, or unintended misuse of funds. 

• Is your organization financially prepared for unexpected challenges? 

According to our 2025 Nonprofits Survey, 30% of Florida nonprofits have no reserve funds. Reserve funds are essential, ensuring organizations can navigate funding disruptions, emergencies, or unexpected economic changes. 

Are annual reports, required filings and registrations current?

Nonprofits are responsible for maintaining a variety of federal and state filings, registrations, and reporting requirements. Missing deadlines or allowing registrations to lapse can be a direct threat to your organization's daily operations. 

Are your messaging and lobbying efforts nonpartisan?

Nonprofit organizations have the right and responsibility to lobby and advocacte for themselves. However, organizations may not legally engage in partisan political activities, such as endorsing or opposing a specific candidate, or align with or contribute to political parties. Learn more about legal lobbying HERE.

Does the organization use secure password and access management practices?

Weak or reused passwords remain one of the most common ways organizations get compromised. What basic IT protections does your organization have in place?

Is sensitive donor, client, or employee information protected?

According to the Maine Association of Nonprofits, it is increasingly important to manage the risk of a data breach by only keeping what you have a legal or strategic purpose to retain. How is your organization taking step to keep your most sensitive data protected?

Does the organization have a crisis communications plan?

Crises rarely occur when you expect them. Having a plan in place that includes prepared messaging and defined spokespersons can help organizations respond more clearly, consistently, and confidently during emergencies.