A nonprofit should have written, board-approved administrative policies that are periodically reviewed by the board. At a minimum, these policies should address issues such as crisis and disaster planning, information technology, communications, and social media.