Skip to content

Washington, D.C. · Nonprofit

Cyber Risk Institute

Cyber Risk Institute (Washington, D.C.) receives grants from 1 organization whose IRS filings report $2,610,763 to it, the largest being Bank Policy Institute ($2,610,763). 0 of them have funded it in more than one year.

Revenue FY2024
$3.7M
Funders on record
1
Grants received
$2.6M
Net assets
$3.9M
0/1 repeat funderspeak grant-dependency 48%
01What it does

What Cyber Risk Institute does

Mission

The Cyber Risk Institute (CRI) is a not-for-profit coalition of financial institutions and trade associations. We're working to protect the global economy by enhancing cybersecurity and resiliency through standardization.Our Cyber Profile tool is the benchmark for cyber security and resiliency in the financial services industry. This ever-evolving and concise list of assessment questions is curated with the assistance of CRI members based on the intersection of global regulations and cyber standards, such as ISO and NIST.

As stated on its FY2024 Form 990.

Program

  1. Standards Committee: The Standards Committee is an advisory Committee of the Cyber Risk Institute (CRI), established to support CRI in identifying US and global financial services cybersecurity and cybersecurity related standards. The Standards Committee makes recommendations as to which identified standards should be prioritized for integration into the Cybersecurity Profile and/or successor documents, and assists in determining when translations into foreign languages are needed.

The program described on its FY2024 Form 990.

02The organization over time

The organization over time

Each line starts at 100 in 2022, so what you read is the shape rather than the size: 150 means half as much again as 2022, 50 means half. The number beside each label in the key is where it ended. The shaded band is where the middle 50% of its peers' revenue would sit, given their growth.

100 = 20222022 Revenue 100 ($5.4M) Expenses 100 ($2.5M) Net assets 100 ($2.9M)2023 Revenue 58 ($3.1M) Expenses 111 ($2.8M) Net assets 111 ($3.2M)2024 Revenue 68 ($3.7M) Expenses 119 ($3.0M) Net assets 135 ($3.9M)
202220232024
Revenue (68)Expenses (119)Net assets (135)Peer revenue range

Balance sheet

Total assets and total liabilities at each year end, in dollars. The largest one-year move in total assets was 2022 to 2023, from $4.3M to $5.2M (+21%).

$4.3M
$5.2M
$6.0M
202220232024
Total assetsTotal liabilities

How it's funded, over time

Each bar is one year's revenue split into where it came from, and every bar is the same height — these are shares, not amounts, so a year that raised twice as much looks the same size. Hover a bar for the split.

2022
2023
2024
ContributionsProgram revenueInvestmentOther

0% of Cyber Risk Institute’s revenue is contributions — more earned-revenue than three-quarters of its peers (61% for the typical peer).

This organization
Typical peer · 4,434 orgs

Surplus & reserves

Operating surplus or deficit each year, and months of liquidity in hand. 0 of the last 3 reported years ran a deficit.

$2.9M
’22
$327k
’23
$678k
’24
19
months of
reserve

Leadership and staff

The officers, directors, trustees and key employees listed on each return. Joined and no longer listed compare each filing with the year before, matching people by surname and first initial; a year after a gap, or a roster under three people, has no comparison.

Chief executive

Joshua Magri

CRI President & CEO, Non Voting

Board chair

Brad Manganello

CRI Board Chairman

As listed on its FY2024 Form 990.

202220232024
Listed262525
Joined·+8+3
No longer listed·93
03Who funds it

Who funds it, year by year

Grant support over time, funder by funder — shade shows the grant size each year.

Funder
'22
total
$2.6M
funders
1

From the IRS filings of Cyber Risk Institute’s funders (the co-funder graph). Association, not causation. Trends are read to FY2023, the last fiscal year that has finished arriving. FY2024–FY2026 are still being filed and are shown unshaded; they do not move any figure on this page.

Where its funders are

100% of Cyber Risk Institute's grant income comes from Washington, D.C. funders.

DC

Funder states come from each funder’s own filing. Trends are read to FY2023, the last fiscal year that has finished arriving. FY2024–FY2026 are still being filed and are shown unshaded; they do not move any figure on this page.

04Its place in the field

Against its field

Cyber Risk Institute holds deeper cash reserves than three-quarters of the 4,203 community improvement nonprofits its size.

Operating margin18% · above the median
Months of reserve19.1mo · top quartile
Revenue growth (annualized)−18% · bottom quartile

this organization peer median middle 50% of peers· 4,203 community improvement nonprofits $1M–$10M, FY2024

Organizations like Cyber Risk Institute

Organizations whose mission and program text most resemble this one, by semantic similarity over every organization in the US filings — the closest peers, and often the clearest route to shared or prospective funders.

In Washington, D.C.

Nationally

05Profile & governance

Read directly from this organization’s own Form 990, as neutral context.

Governance

19
board members
100%
independent
✓Conflict-of-interest policy✓Whistleblower policy✓Document retention✓Board reviewed the 990✓Audited financials

Screen this organization

A dated, signed PDF of the compliance screen for Cyber Risk Institute: IRS status (Business Master File, Publication 78, auto-revocation), the OFAC sanctions lists, the Internal Revenue Bulletin, and California registration, with the Rev. Proc. 2018-32 §8.01 reliance elements stated element by element. Generated from the current files at the moment you download it.

A paid feature, included from the $75 plan up. Sign in to download.

Screens are triage, not determinations; a source that cannot be read reports not screened, never clear. Screen this nonprofit · How the screen works · on the API as GET /api/screening/{ein}?format=pdf

Questions and answers

Who funds Cyber Risk Institute?
Cyber Risk Institute (Washington, D.C.) receives grants from 1 organization whose IRS filings report $2,610,763 to it, the largest being Bank Policy Institute ($2,610,763). 0 of them have funded it in more than one year.
How many funders does Cyber Risk Institute have?
IRS filings report 1 organization giving $2,610,763 in grants to Cyber Risk Institute.
Who is the largest funder of Cyber Risk Institute?
Bank Policy Institute is the largest funder on record, with $2,610,763 in grants. The full list of funders is on this page.
How can an organization like Cyber Risk Institute find more funders?
Start with the funders already giving here, then look at the foundations that back similar organizations in Washington, D.C.. The funding by cause and by state pages list the largest funders for a given area and how to approach them.

Play a game about who funds Cyber Risk Institute →

These figures are read directly from IRS Form 990 / 990-PF e-file XML: this organization’s own return for FY2024 (financials across 2022–2024), and the filings of 1 funders that report grants to it. “On record” means captured in the filings we have parsed — a funder that does not e-file, or whose grant detail is not itemized, will not appear. Filings run roughly 12–24 months behind. Trends on this page end at FY2023, the last fiscal year that has finished arriving; later years are shown and marked, and move no figure. Data on this page was exported October 14, 2026. What this page cannot tell you · view filing