Blog
-

If You Lose Member Data, Who Do You Have to Tell?
If member data is exposed, who must you tell? A plain-English guide to state breach notification laws and what to do in the first days so you can comply.
-

Keep It or Delete It? The Security Control Nobody Talks About
Deleting old data is a security control, not housekeeping. A plain-English retention framework for churches, and where deletion quietly fails.
-

Background Checks: Who Holds Them, For How Long, and How to Destroy Them
Volunteer background checks hold Social Security numbers and dates of birth. Who should keep them, for how long, and how to destroy them properly.
-

The Most Sensitive File in the Building
Care notes, benevolence files, and who’s going through what. Where these records really live, why that’s a problem, and the controls that fit a small staff.
-

What Do You Actually Have? A One-Afternoon Data Inventory
You can’t protect what nobody has written down. A room-by-room, account-by-account way to find every place your church keeps personal information.
-

The Scam Your Congregation Won’t Tell You About
Confidence fraud takes months to build and uses faith as the lever. What it looks like, why victims defend the scammer, and how a leader can respond well.
-

Protecting the Livestream, the Funeral, and the Small Group Call
A funeral stream disrupted with hateful images is a pastoral emergency. The settings, the moderator role, and the thirty-second response that ends it fast.
-

When the Breach Isn’t Yours
Your giving platform or church management system gets hacked. You did nothing wrong and you still have to respond. Here is the plain-English playbook.
-

Anatomy of a Phishing Email: Eight Tells and What They Look Like
Phishing was America’s most-reported cybercrime again in 2025. Eight tells that give a fake email away — each shown the way it actually lands in a church inbox.

