Community IT Innovators Nonprofit Technology Topics · Community IT Innovators

Cybersecurity Tabletop Exercise for Nonprofits with Matt Eshleman pt 1

July 25, 2025·25 min·2 clips

Matthew Eshelman explains how nonprofits can conduct a cybersecurity tabletop exercise without expensive consultants.

This episode features a webinar on conducting cybersecurity tabletop exercises for nonprofit organizations, hosted by Community IT Innovators. The moderator is Carolyn Woodard, the Outreach Director, and the featured cybersecurity expert is Matthew Eshelman. The session aims to provide practical, low-cost guidance for nonprofits to actively test their security plans. The webinar defines a tabletop exercise as a discussion-based session where a team walks through a simulated emergency scenario. Matthew Eshelman explains that these exercises are a valuable component of a nonprofit's overall cybersecurity planning and emergency response strategy. A core argument is that organizations can conduct these exercises internally without necessarily hiring expensive consultants. The hosts guide listeners through a sample tabletop exercise scenario to demonstrate the process. They discuss how to structure the exercise, including defining roles and walking through hypothetical incident responses. The session covers identifying key lessons learned from conducting such a simulation. Practical next steps for implementing or improving these exercises at a listener's own nonprofit are also outlined. A key insight is that tabletop exercises strengthen an organization's preparedness by revealing gaps in plans through low-stakes practice. The approach is framed as an inexpensive yet highly effective method for testing and refining security protocols. The scenario walkthrough is designed to make the abstract concept of incident response planning feel concrete and actionable. The tone is educational and instructional, clearly aimed at providing nonprofit staff with immediately usable tools. The style is conversational and workshop-like, mirroring a live webinar format with clear learning objectives. It is practical and avoids overly technical jargon, focusing on process and planning. Nonprofit technology managers, IT staff, and executive directors concerned with cybersecurity readiness would find this episode directly useful. Listeners seeking highly technical, vendor-specific security tools or advanced threat analysis might find the content too foundational.

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Community IT Innovators Nonprofit Technology Topics