Addressing and protecting against cybersecurity threats is an increasingly important part of a nonprofit board's responsibilities. However, too many boards think that they can simply call in an IT consultant or even hire an IT staffer, and call it good.
A Sun, study studied this question.