The digital presence of a non-governmental organisation often begins with a burst of clarity and purpose. There is a new campaign to launch, a rebranding exercise to complete, or a specific grant that necessitates a fresh online home. In these moments, the energy is high, the budget is allocated, and the goals are clear.
In Brief: A New Model for Digital Governance
For leaders and boards, understanding the digital estate is a matter of duty of care. This essay explores:
- The Stewardship Gap: Why "keeping the lights on" is no longer enough to protect NGO reputations.
- Beyond Cybersecurity: Identifying the "quiet" risks of accessibility gaps and institutional memory loss.
- Governance vs. Maintenance: The specific questions boards must ask to move from reactive anxiety to proactive oversight.
- A Defensible Posture: How digital stewardship creates a transparent, funder-ready foundation.
However, once the launch phase concludes, a shift occurs. The website moves from being a 'project' to being 'infrastructure'. It is no longer the focus of weekly meetings; it is simply expected to work. It sits in the background, a silent engine supporting your mission.
For many NGO leaders, this is where the quiet anxiety begins. You may not be a technical expert, but you have a lingering sense that the digital ground beneath your feet is not as solid as it once was. Perhaps a contact form failed for a week without anyone noticing. Perhaps a staff member who 'knew how it all worked' moved on to another role, leaving behind a tangle of passwords and undocumented processes.
These are not just technical glitches. They are symptoms of a stewardship gap. Most NGOs do not have a digital strategy problem; they have a digital stewardship problem. While much is written about digital transformation, very little is said about the quiet, disciplined work of looking after what you already have.
The Hidden Cost of “It’s Fine for Now”
In the busy environment of a community organisation, 'good enough' is often the only available standard. If the website loads and the 'Donate' button functions, the box is checked. This reactive stance is understandable—resources are tight, and the primary mission always comes first.
Yet, digital systems are not static. Unlike a physical building, which might show visible signs of wear—a leaking roof or a cracked window—a website decays invisibly. It is a composite of third-party plugins, server configurations, and content management updates. Each of these components is moving at a different pace.
When we adopt a 'fine for now' mentality, we are not actually maintaining a steady state. We are slowly accumulating what leaders should recognise as reputational risk. This risk often compounds during periods of transition. A website handed over between agencies, staff, and volunteers eventually loses its original intent. The system survives, but it is no longer protected. It is merely persisting.
Redefining Risk Beyond the Breach
When we discuss digital risk, the conversation almost always gravitates toward cybersecurity—the dramatic fear of being hacked. While critical, it is only one part of the picture. For an NGO, the most significant risks are often much more subtle. They are the risks that erode trust over time.
Consider accessibility. If your digital platforms are not compliant with modern standards, you are quietly excluding the very people you exist to serve. This is not a technical error; it is a failure of mission. In the eyes of a user with a disability, an inaccessible website is a closed door.
Then there is the risk of reputational ambiguity. Outdated content or an interface that feels like it belongs to a previous decade can signal to a potential funder that the organisation is not quite 'on the ball'. If your digital presence feels neglected, a visitor may wonder if your programs are being similarly overlooked.
Why Maintenance Is Not Stewardship
There is a common misconception that paying for a monthly maintenance plan is the same as having a digital strategy. Maintenance is about keeping the lights on. It is a reactive service designed to ensure the system doesn't break today.
Stewardshipp, however, is a proactive discipline. It involves looking at the horizon to see which technologies are becoming obsolete and which new standards—whether in privacy law or user experience—need to be integrated.
A maintenance provider will update a plugin because a new version is available. A digital steward will ask if that plugin is still the best tool for the job. Stewardship is the bridge between the technical reality of your website and the strategic responsibility of your board.
What Digital Stewardship Actually Means
If stewardship is a role rather than a service, what does it actually look like? It is built on four pillars: oversight, ownership, scanning, and translation.
Ongoing oversight ensures the digital presence remains aligned with current goals. Clear ownership is the antidote to 'accidental IT owner' syndrome, ensuring the organisation holds the keys to its own digital estate.
Regular risk scanning moves beyond the technical, looking through the lens of a donor or beneficiary. Finally, translation acts as the interpreter between technical jargon and mission-driven reality, providing the clarity needed for boards to make informed decisions.
The Questions Boards Should Be Asking
To close the governance gap, leaders do not need to learn how to code; they need to ask better questions. A mature board should be asking:
- Who owns our digital history and documentation?
- Where does our digital risk sit if a key individual leaves?
- Are we meeting our duty of care regarding accessibility and privacy?
- Is our digital posture defensible to a major funder?
A Calmer Way Forward
The shift toward stewardship does not require a massive budget or a total system overhaul. It starts with visibility. When you have clarity, you stop worrying about every new trend because you have a framework for deciding what matters. Book Your Diagnosis Today.
Good stewardship is, ultimately, an act of respect. It is respect for the people who visit your site looking for help, and for the mission you carry out. At Marzipan, we focus on this disciplined practice—providing the oversight that allows NGO leaders to lead with confidence.
If you are responsible for a website people depend on, clarity is a good place to start. Reflect on whether your organisation has true stewardship, or if it is simply running on momentum.
Further Reading & Frameworks
Our approach to digital stewardship is informed by these global standards in nonprofit responsibility:
-
The Charity Digital Code of Practice
A foundational framework for NGO leaders to increase impact through digital best practices. -
WCAG 2.2 Accessibility Standards
The international standard for ensuring digital services are usable by everyone. -
NCSC Cyber Security Board Toolkit
Resources designed to help board members discuss digital risk with technical teams.