Protecting your Organization

• Are board roles and responsibilities clearly defined?

Strong boards function best when expectations are clear. Do your board members understand their responsibilities, decision-making authority, and role in supporting the organization’s mission?

• Are bylaws and governance policies up to date?

Policies become outdated over time. Do your bylaws still reflect current operations, leadership structures, and legal requirements? 

• Does the board regularly review organizational performance and risk?

Boards operate best when they are familiar with operational challenges. Is your board aware of the issues that could affect organizational stability?

• What are your organization's internal financial controls?

Internal controls are financial management practices used to prevent misuse and misappropriation of assets. Examples include requiring two signatures on a check, or a periodic review by an objective person of the list of all vendors receiving payments from your organization. What are your organizations current policies? 

• Are grant funds and other sources of revenue properly tracked?

Clear tracking systems help avoid reporting issues, missed deadlines, or unintended misuse of funds. 

• Do you know the funding source of your city, state or federal grant? 
• Is your organization financially prepared for unexpected challenges? 

According to our 2025 Nonprofits Survey, 30% of Florida nonprofits have no reserve funds. Reserve funds are essential, ensuring organizations can navigate funding disruptions, emergencies, or unexpected economic changes. 

• Are annual reports, required filings and registrations current?

Nonprofits are responsible for maintaining a variety of federal and state filings, registrations, and reporting requirements. Missing deadlines or allowing registrations to lapse can be a direct threat to your organization's daily operations. 

• Are your messaging and lobbying efforts nonpartisan?

Nonprofit organizations have the right and responsibility to lobby and advocate for themselves. However, organizations may not legally engage in partisan political activities, such as endorsing or opposing a specific candidate, or align with or contribute to political parties. Learn more about legal lobbying HERE.

• Does the organization use secure password and access management practices?

Weak or reused passwords remain one of the most common ways organizations get compromised. What basic IT protections does your organization have in place?

• Is sensitive donor, client, or employee information protected?

According to the Maine Association of Nonprofits, it is increasingly important to manage the risk of a data breach by only keeping what you have a legal or strategic purpose to retain. How is your organization taking step to keep your most sensitive data protected?

For additional guidance, check out the slide deck from our recent cybersecurity webinar: Hackers, Ransomware, and Data Leaks—Can Your Nonprofit Afford the Risk?

Presented by Novus Insight, this presentation includes actionable strategies organizations can use to strengthen cyber protection practices.

• Does the organization have a crisis communications plan?

Crises rarely occur when you expect them. Having a plan in place that includes prepared messaging and defined spokespersons can help organizations respond more clearly, consistently, and confidently during emergencies.

• Do you have appropriate insurance in place?

Policies such as Commercial General Liability (GL) insurance can help protect against common liability exposures faced by many nonprofits, while additional coverage may be needed depending on your organization’s size, activities, staffing, property, and services.

The Nonprofit Risk Management Center offers a helpful overview of nonprofit insurance considerations, including common types of coverage, key questions organizations should consider when evaluating policies, and tips for navigating a dynamic insurance market. 

As a benefit of membership, members of Florida Nonprofit Alliance receive free access to resources from the Nonprofit Risk Management Center.