While many nonprofits are actively addressing cybersecurity risks, many are not. This report published by the Canadian Centre for Nonprofit Digital Resilience explores some of the key challenges nonprofits face in addressing cybersecurity risks and introduces a five-step cybersecurity on-ramp developed to help settlement organizations as well as other types of nonprofits take initial steps to strengthen their cybersecurity and mitigate critical cyber risks. It also includes key resources that are useful starting points for organizations when considering cybersecurity.