Urvashi Kathuria, Head of Security Assurance for the Asia-Pacific and Japan region, Okta, presents the stark cyber security reality facing NFPs – the second most targeted sector globally – and argues that closing the gap requires three things: building a security culture (not just a tech stack), adopting a zero trust mindset, and urgently governing AI tool use before "shadow AI" creates serious compliance and breach risks.