Thirdsector Over 40% of Charities Unprepared for Cyber-Attacks, Survey Reveals
Article Content
- •42% of charity governance professionals report limited cyber-attack preparedness.
- •76% of charity boards lack adequate AI risk management capabilities.
- •Financial resilience is a top concern for charities, impacting cybersecurity focus.
A recent survey by the Chartered Governance Institute of UK & Ireland found that over 40% of charity governance professionals reported their organizations have 'limited or non-existent' preparedness for cyber-attacks. The survey, which included 319 governance professionals, highlighted that charity boards are the least equipped to handle artificial intelligence (AI) risks, with 76% indicating limited or absent capability in this area. Additionally, one-third of respondents noted their boards have no meaningful capacity to address AI risks. The findings suggest that many charity boards are struggling to keep up with developments in AI and cybersecurity, with financial pressures further complicating their ability to prepare. The report calls for policymakers and regulators to provide more practical support to help charities enhance their governance capabilities against these risks.
Ask AI about this cluster
Answers cite the sources they use
More articles in this cluster (2)
Common questions
What percentage of charities are unprepared for cyber-attacks?
How do charities compare to companies in cyber preparedness?
What are the main challenges faced by charity boards?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…