Author profile picture

Many Dutch charities are still insufficiently prepared for digital threats, according to a new report by cybersecurity organization The Trusted Third Party (TT3P). The report provides for the first time a detailed overview of the vulnerabilities facing charitable organizations and presents concrete recommendations to improve digital security.

Digital transformation

Digital transformation has helped nonprofit organizations increase their impact, but it has also exposed them to cybersecurity risks. Phishing, malware, and ransomware attacks are a growing threat. The report, based on extensive analysis, states that many Dutch charities are inadequately protected against these threats.

“At a time when digital presence is essential, charities must not only innovate but also protect,” emphasizes Patrick Jordens, CEO of TT3P. “With this report, we want to make the urgency clear that charities need to take their cybersecurity seriously.”

Smaller targets most vulnerable

Examples of large-scale cyber attacks on organizations such as the International Committee of the Red Cross and software provider Blackbaud illustrate the scale of the threat. These incidents emphasize the need for stricter security measures, including at Dutch charities.

The report calls for more cooperation within the charity sector to collectively achieve a higher level of digital security. “Many small and medium-sized organizations lack the resources to take adequate measures on their own,” Jordens continued. “Larger charities can play a leading role in this by sharing knowledge and working together. The Charities Netherlands Cybersecurity Handreiking already provides a foundation for this, but the sector must now get moving. The recent hack on the Dutch police shows the urgency of this.”

Practical solutions for the digital future

The report outlines practical steps that nonprofit organizations can take to improve their digital security. In addition to technical measures, it highlights the importance of a culture of cybersecurity awareness. Training for employees and volunteers, as well as quality information security policies, are crucial.