I wouldn't. Both goals of maximizing profit and achieving a goal on a minimal possible budget end up cutting costs in places that aren't immediate blockers, whe

I wouldn't. Both goals of maximizing profit and achieving a goal on a minimal possible budget end up cutting costs in places that aren't immediate blockers, where security lies. In my experience, security is a focus at places, either non-profit or otherwise, in one of the following situations: * The organization has one or more squeaky wheel employees that force everybody else to consider security where they wouldn't otherwise. * The organization or another in the same industry has already had a very painful security breach. * Security itself is part of the selling point. Non profits are slightly different, but they still experience many of the same problems because the goal is still getting the most done on the budget you've got.