Churches have embraced the digital world and are becoming very proficient in the use of computers.  A vast array of applications has been made available to the church including sophisticated financial accounting and reporting, childcare security, online purchasing, online tithing, phone trees and coffee bars with free wireless internet.  Without a doubt, churches have become technologically savvy.

Unfortunately, there is a vast array of other things that most churches aren’t so savvy about: the numerous new portals computers provide through which fraudsters can gain entry into the church.  Computer and online crime is drastically changing the face of fraud prevention.  The best way to address this situation is to simply provide a list of questions each church should ask itself:

• Does our church have a formal Information Technology security plan?
• Do any individuals at our church have access to all modules of the church’s software system?
• Does our church partition its computer applications so that employees and volunteers have access only to files necessary to perform their duties?
• Does computer access require passwords that are confidential and unique?
• Are our passwords changed periodically?
• Are passwords complex including alpha, numeric and case sensitive characters?
• Do we have backup procedures that are performed regularly that include off-campus storage?
• Do we have measures in place to protect the church from malware?
• Do we train our employees to avoid accepting email from unknown locations?
• Do we have a download policy?
• Do we maintain separate public and private wireless networks?

(This post is part of an article published originally in the Spring 2011, NACBA Ledger.)