Cyber Governance for Charity Trustees

A concise course for charity trustees, chairs and chief executives on overseeing cyber and data risk. Understand trustees' responsibilities, the questions to ask, how to set risk appetite and read reports, how to oversee suppliers and fraud risk, and what to do – including Charity Commission serious incident reporting and ICO reporting – when an incident happens. Includes board questions and a 90-day action plan.

Who this course is for: Charity trustees, chairs, treasurers, chief executives and senior leaders of charities of all sizes. No technical knowledge needed.

Self-paced online learning. Earn a Certificate of Completion on passing.

What you will learn

• Explain why cyber and data risk is a trustee responsibility and what good oversight looks like
• Ask the right questions and interpret management reports on cyber risk
• Set a proportionate risk appetite and oversee key controls, suppliers and fraud risks
• Understand trustees' role in incidents, including Charity Commission serious incident reporting and ICO notification
• Lead a practical 90-day plan to strengthen the charity's cyber resilience

Course modules

• Why cyber is a trustee issue
• Risk, appetite and asking the right questions
• Suppliers, data and fraud
• Incidents, reporting and next steps