2024 Update on Retirement Plans: Cyber Best Practices
Cybersecurity remains a crucial concern for retirement plan administrators and sponsors. Ensuring the security of sensitive data and maintaining compliance with regulatory requirements is essential to protect plan participants and maintain trust. GRF hosted a 2024 Update on Retirement Plans webinar on May 16th, 2024, which outlined key cybersecurity best practices recommended by the Department…
Understanding Reasonable Cybersecurity Measures under New Federal Guidelines for Uniform Guidance
Cybersecurity has skyrocketed to the number one slot on many surveys and experts’ risk rankings as noted in GRF’s Top Risk for Nonprofits and Associations report. In response to the evolving landscape of cybersecurity threats, the Office of Management and Budget (OMB) has introduced language in the recently updated Guidance for Federal Financial Assistance aimed…
Key takeaways from GRF’s 2024 ESG Summit
On Wednesday, April 24, 2024, GRF brought together a panel of leading industry experts to provide a comprehensive overview of ESG, including current trends and regulations for measuring, monitoring, and reporting on Environmental, Social and Governance (ESG) initiatives. The half-day summit was jam packed with actionable information and advice. Save the date! GRF’s ESG Summit…
Enterprise Risk Management in Nonprofit Organizations – 2024 Workshop Takeaways
On February 22-23, 2024, GRF and NC State University’s Enterprise Risk Management Initiative convened over 100 nonprofit executives and board members to discuss enterprise risk management strategies and tactics. This 5th annual workshop, “Navigating the World of Uncertainties Impacting Nonprofit Organizations,” aims to fill a gap in the resources available to tax-exempt organizations seeking to…
Greenhouse Gas Emissions: Defining Scopes 1, 2, and 3
Many organizations are actively working to diminish their greenhouse gas emissions. When tracking and reporting progress, the terms ‘Scopes 1, 2, and 3 emissions’ are frequently used. But what do these designations truly signify? On the journey to achieving net zero emissions, organizations measure and assess their greenhouse gas emissions through three distinct ‘scopes.’ The…
Key Takeaways from GRF’s Cyber Symposium for Nonprofits & Associations
GRF’s first annual Virtual Cyber Symposium for Nonprofits & Associations brought together experts in cybersecurity, privacy, and insurance to share the strategies tax-exempt organizations can implement to identify risks and reduce their exposure. The event was held on December 3, 2023. Join us for this year’s event on December 10 from 12noon – 3pm! Topics…
Cybersecurity Checklist: Is your organization secure?
Cybersecurity threats are always changing and hackers are busy finding ways to exploit your assets. Download a PDF copy of our checklist to share with your colleagues, or, take our interactive quiz below to help identify areas where you might be vulnerable. GRF Can Help Effective cybersecurity is a journey, and whether you have a…
Fraud Awareness Tips and Resources
International Fraud Awareness Week takes place November 12 – 18, 2023 Fraud Awareness Week highlights how crucial it is for organizations to pause and reflect on the evolving landscape of fraud risks. In an era where the convergence of technology and human ingenuity continues to shape our world, the need for proactive risk management is…
ESG for Non-Profit Risk Managers
Bottom Line: ESG is becoming more important to donors, employees, partners, and other stakeholders. Non-profit risk managers need to be prepared to answer tough questions about how their organization is managing critical ESG risks. ESG Basics for Non-Profits ESG refers to environmental, social, and governance factors in an organization’s operations. There is no universal definition…
Mitigate Online Donation Risks with PCI Compliance and Third-Party Risk Management
Taking donations online is a huge benefit to nonprofit organizations, but online payments also expose potential risks. To safeguard their operations and donors’ financial information, nonprofits must prioritize Payment Card Industry (PCI) compliance and third-party risk management. Nonprofits are at a higher risk of credit card test attacks than other organizations due to certain functionality…