Don't consider this to be legal advice.
Your active use of the .org as a legitimate site for whatever your endeavors are should give you some sort of right to the term, as it was a mark used to strengthen your brand.
As the .com was registered afterwards, one can only believe that the registrant was doing so to keep it out of your hands. They may have had other reasons, but what I said is quite well possible.
What I feel could win you the case would be if you can prove the current owner is using the name in "bad faith". If they are just holding it to keep it out of your hands, you have a higher likelihood of getting it out of them than if they were running something legitimate on it.
If you are losing type-in traffic to the .com, then that could also be grounds to claim rights to the name.
Just because WIPO creates a living hell for everybody, here's what I would recommend you do...
Try and use a buyer broker to buy the name from them. All things said and done, you're going to spend money at some point. WIPO will cost you $x,xxx just to start, and will be quite strenuous to go through with. By offering the guy $200, $500, etc., you save what you would have spent on WIPO and the owner gets a few bucks out of it, which was probably his ultimate goal by registering the name in the first place.
By using the buyer broker, you don't run the risk of identifying yourself to the owner.
Should that not work out, sending a cease and desist letter via certified mail should get it into his hands (should he sign for it - which he has no reason not to).
You might even want to try putting in something like "If I do not receive a response by (date), I will take that as confirmation that you will push the domain name to my account. Here are my account details..." so that he has to engage in a dialog with you if he wants any hope of keeping the name. After all, he did sign for the letter... so he must have read it and understood it, and his subsequent action should be in accordance with his intentions. If he didn't understand what you wrote for him, that would make him illiterate and unable to enter into the contract involved with registering the domain name in the first place.
Last resort would be to actually seek legal counsel and perhaps have them follow up with the owner threatening to take them to WIPO, and then following through with your threat if they call your bluff.
Trademark law is a dirty game which is why I take no part in anything involving it.
Wish you the best of luck in straightening this out.
Again, to anybody reading this, do not consider this to be legal advice. I'm not a lawyer, not a member of any bar. Just speaking my opinion.