Skip to main content
Annual Tabletop
Menu
Data Exposureintro~45 min

Donor PII Exposure — Non-Profit Cyber-Grant Reporting

A misconfigured S3 bucket exposes 11 years of donor records. Walk the response under non-profit cyber-grant reporting requirements and donor trust constraints.

Learning objectives

  • Decide on donor notification timing and channel.
  • Produce a board-ready briefing within 12 hours.
  • Map to non-profit cyber-grant incident reporting requirements.

Scenario brief

## Scenario context

Default scenario for non-profit demos. Mission-tier-priced and grant-aligned.

Bring this scenario to your next exercise.