On-site cybersecurity & ministry risk assessment

Let’s Find the Gaps.
At Your Church.

Protect the people, information, and trust your ministry depends on. We prepare in advance, spend a full day with your team, and deliver a clear plan for what comes next.

Two assessorsOne full day on site$12,500 + travel

Schedule Your Church Audit See the on-Site Day

Built for complex ministries

Look Beyond the IT Closet.

For executive pastors, operations leaders, and the teams entrusted with protecting a large or multisite church.

Your Pastor & Trusted Circle

Leadership accounts, assistants, delegated access, account recovery, impersonation risks, and guidance for keeping ministry and family information separate.

Giving & Financial Controls

Giving records, donation-platform access, payout settings, payroll, and the process for verifying vendor or bank-detail changes.

Member & Ministry Information

Access, sharing, and exports for member records, pastoral care, prayer requests, benevolence, and children’s information.

Missionaries & Sensitive Locations

How worker identities, locations, travel plans, photos, prayer updates, and communications are shared and protected.

Accounts, Systems & Devices

Email, church software, selected devices, MFA, administrator privileges, former staff access, and access held by vendors or volunteers.

Campuses & Connected Technology

Central controls and selected local practices for guest Wi-Fi, check-in, production systems, cameras, and remote access.

Public Channels & Church Reputation

Ownership and recovery of your website, domains, social accounts, and livestream channels, plus who can speak for the church during an incident.

Recovery & Sunday Readiness

Backup evidence, an agreed safe sample restore, incident responsibilities, and practical fallbacks when essential ministry systems are unavailable.

The engagement

One Day Together.
Preparation and Follow-Through Included.

01Before we arrive

Prepare Around Your Church.

We meet your sponsor and IT contact, agree on scope, and review selected system evidence. You receive an agenda and a short preparation checklist.

02A full day on site

Review. Teach. Rehearse.

Two assessors meet with leadership and key staff, validate technical findings, examine sensitive workflows, lead a 60-minute staff seminar, and run a 45-minute leadership incident exercise.

03After the visit

A Plan Your Team Can Use.

Within seven business days, receive written findings and a 90-day roadmap. We present the priorities to leadership and reconnect for a 30-day follow-up.

An illustrative on-site agenda

A Working Day with Your Team.

We split into parallel sessions where useful. Your final agenda reflects your church’s priorities and staff availability.

8:30–9:00

Leadership priorities, scope, and operational briefing

9:00–10:30

Technical review alongside leadership and finance interviews

10:30–12:00

Sensitive data, missions, and campus technology walkthrough

12:00–12:45

Lunch and assessor review

12:45–1:45

Staff security seminar · 60 minutes

1:45–2:30

Leadership incident exercise · 45 minutes

2:30–3:45

Follow-up checks, recovery evidence, and gap validation

3:45–4:30

Initial observations, urgent actions, and next steps

For your staff

Recognize. Verify. Report.

Practice responding to pastor impersonation, AI voice scams, suspicious sign-ins, payment changes, and unsafe sharing. Staff leave with a simple verification and reporting checklist.

For your leadership

Rehearse a Hard Decision.

Work through a fictional account compromise or fraudulent payment request. Clarify who decides, who calls the bank or IT provider, and how the church communicates.

Who should participate

A leadership sponsor, your executive assistant or operations lead, IT or your provider, finance, and representatives for member care, children’s ministry, missions, and communications. Each joins the relevant session.

What you take away

Findings You Understand.
A Plan You Can Act On.

Know what needs attention, why it matters to your ministry, and who should do what next.

A concise leadership and board summary.
Prioritized findings with evidence, ministry impact, and recommended actions.
A 90-day roadmap with owners, effort, and planning cost ranges.
Technical details for your IT team, with sensitive findings handled separately.

See a Sample Report

CHURCH DEFENSECYBERSECURITY FOR MINISTRYILLUSTRATIVE SAMPLE

Leadership briefing

A Clear Picture.
A Practical Plan.

Cedar Grove Church · Fictional example

Email & account accessPriority action

Giving & payment controlsNeeds attention

Backup & recoveryEvidence needed

Your priorities. Your next steps. Your 30/60/90-day roadmap.

One clear starting point

The Church Security Audit.

A focused engagement built around a full day at your church.

$12,500+ preapproved travel

Schedule Your Church Audit

Start with a scope call. We confirm fit, timing, and the total cost before you book.

Included in your engagement

Pre-visit planning and remote evidence review
Two assessors · one full day · one primary campus
60-minute staff security seminar
45-minute leadership incident exercise
Written findings and a prioritized 90-day roadmap
60-minute leadership findings presentation
30-day remote follow-up and evidence review of priority fixes

Multiple campuses? Add a shared-systems campus day for $4,000 + travel. We confirm coverage before booking.

See Scope and Campus Options

Scope & campus options

Clear Coverage from the Start.

The audit samples agreed systems and workflows. Your report distinguishes verified findings, missing evidence, and areas needing a deeper review.

The Standard Engagement

One primary campus and one shared identity environment.
Up to five critical business applications.
Broad available control reports plus detailed samples of up to 10 accounts and 10 endpoints.
Authorized, non-disruptive checks of up to five church-owned domains and 10 public IP addresses.
Remote evidence samples from up to two satellite campuses sharing central systems.

When You Need More Coverage

Additional campus visits: $4,000 per two-assessor day, plus preapproved travel, when central systems are shared.

Separate environments: additional tenants, independent networks, larger samples, or more extensive reviews receive a custom scope.

Pastor and family: personal-account and household-device reviews are separately scoped, with consent from each adult account holder.

Specialist work: penetration testing, comprehensive physical security, incident forensics, and Sunday service observation are separate engagements.

Protect Sensitive Information While Reviewing It.

We use settings, permissions, redacted examples, and approved evidence wherever possible. We agree on access and evidence handling in advance. Active checks require written authorization for named assets. This scoped assessment is not a certification or a guarantee that every vulnerability will be found.

After the assessment

Your Team. A Clearer Plan.
Help Putting It into Practice.

Your church owns the findings and chooses the next step.

We can implement improvements alongside your existing IT team: stronger accounts, safer sharing, network changes, recovery plans, and staff procedures. Each project has its own scope, price, and completion checks.

Explore Implementation Support

Before you book

Questions About the Audit.

Looking for a smaller remote review? Church Security Essentials remains available from $2,950 for a separately defined scope.

Ask about Essentials

Let’s Come to Your Church.

Know your risks. Prepare your people. Leave with a plan.