Non-profits hold sensitive information about the people they serve, their donors and their staff. They depend on technology to deliver programs, usually with a part-time administrator, volunteers and an MSP. ABISOL provides senior technology, cybersecurity and transformation leadership sized to non-profit budgets, so your mission is protected and your team can do more with what you have.
High sensitivity, lean budgets, and technology that is often someone's side job.
of Canadian non-profits that experienced a cybersecurity incident said it prevented the use of resources or services.
Source: Imagine Canada (Sept 2024), analysis of Statistics Canada's 2021 Canadian Survey of Cyber Security and Cybercrime, organizations with 10+ staffaverage annual spend on cybersecurity prevention and detection: non-profits compared with businesses.
Source: Imagine Canada (Sept 2024), analysis of Statistics Canada's 2021 Canadian Survey of Cyber Security and Cybercrime, organizations with 10+ staffRegulatory context: privacy law for non-profits is a patchwork. According to the Office of the Privacy Commissioner, PIPEDA applies to non-profits mainly when they carry out commercial activities, such as selling, bartering or leasing donor or membership lists. Quebec's Law 25 and British Columbia's PIPA apply to non-profits' activities more broadly, and Alberta's PIPA covers at least their commercial activities, depending on how they are incorporated. Registered charities must also keep adequate books and records for the CRA, including electronic records. Knowing which rules apply to you is a governance question, not just an IT one. Read our guide to Law 25 and PIPEDA for non-profits, with a checklist.
Laptops get fixed, but nobody owns privacy, cyber risk or the technology plan.
A capable administrator or finance lead doing their best, without the time or mandate.
Directors rarely see technology or cyber risk until something goes wrong.
Donated licences are claimed but never secured, or not claimed at all.
Instead of a risk to the people you serve, your donors and your reputation.
ABISOL works alongside your people, MSP and vendors. We provide executive direction, governance and advocacy, and we don't replace anyone. Lead the IT team? See how we work with you.
A cyber and privacy review sized to non-profits, plus a review of your systems, licences and non-profit program eligibility.
A Fractional CIO and CISO for the Executive Director and Board, with a roadmap aligned to your strategic plan and funding cycles.
CRM, Microsoft 365 or Google, and finance working as one system of record. Intake and reporting automated, with practical AI rules for staff and volunteers.
CRM and donor-platform selection, and grant-funded technology projects delivered and reported to funders.
Privacy, acceptable-use and AI policies, volunteer access controls, an incident plan and a one-page Board dashboard.
Technology strategy, budget, vendors and Board reporting, led by an experienced executive.
Learn moreA cyber and privacy program, risk register and Board reporting, sized to your organization.
Learn moreUnderstand which laws apply to you, then put practical policies, consent and breach procedures in place.
Learn moreMake full, secure use of the Microsoft, Google and TechSoup Canada programs you qualify for.
Learn moreA defensible platform choice, and systems that share data instead of staff re-keying it.
Learn moreSensible, low-friction controls for volunteers, shared devices and field work.
Learn moreTechnology projects scoped, delivered and reported in a way funders understand.
Learn moreA plan to keep services running, and to notify the right people, if something goes wrong.
Learn moreYours to keep, whether or not you continue.
Fractional CIO, CTO & CISO · CISSP · CISM · PMP · MBA
Mohammad has worked across non-profits, healthcare, insurance, financial services and the public sector. He has built cybersecurity and data-governance programs from policy through to Board reporting.
More about MohammadA focused conversation with your Executive Director and operations lead, so your Board can decide based on facts.
No. They do different jobs. Keep a good MSP for day-to-day support. ABISOL governs above it, sets the strategy and holds the provider to clear service levels.
Smaller organizations are affected too. Imagine Canada's analysis of Statistics Canada data found that 16% of small organizations reported a cybersecurity incident. Attacks are largely automated and don't check an organization's size first.
It depends. PIPEDA mainly covers non-profits' commercial activities, such as selling or renting donor lists. But Quebec's Law 25 and BC's PIPA apply more broadly, and other rules may apply to your sector or funders. We help you work out exactly which obligations apply, then put proportionate practices in place.
That's the gap fractional leadership is designed for: senior judgment for an agreed amount of time each month, sized to your budget, often starting by making full use of the non-profit technology programs you already qualify for.
With simple, proportionate controls: individual accounts instead of shared logins, access that matches the role, and a checklist to remove access when someone leaves.
That's fine. We start with fundamentals. When you're ready, we set practical rules for how staff and volunteers may use AI tools, so sensitive information about the people you serve stays protected.
We work with least-privilege access, avoid holding your sensitive data wherever possible, and sign an NDA. You keep ownership and control throughout.
A no-obligation conversation about where you stand and what to do first.
Prefer slides? View the presentation version · All services
