To reduce potential risk, nonprofits must prioritize physical security, IT expertise, data privacy and network connections.