It is a Tuesday morning in the church office. The administrator sits down, coffee in hand, to process the weekly DBS checks for the new Sunday School volunteers. It is a mundane, administrative task, a "Martha" moment in a world that often prizes "Mary" spirituality. But in today's day and age, this simple act of administration has become a frontline of spiritual stewardship.
Last year, the data breach involving the Access Personal Checking Services (APCS) (a third-party supplier used by many dioceses and Christian organisations) served as a stark wake-up call. It reminded us that the church is not invisible to the digital threats that prowl the modern world. For many church leaders, terms like "phishing," "ransomware," and "two-factor authentication" feel like a distraction from the Great Commission. They would rather talk about grace than firewalls.
However, if we view cybersecurity through the lens of Scripture, we find it is not merely an IT problem; it is a matter of stewardship, integrity, and ultimately, loving our neighbour.
Stewardship beyond the balance sheet
We are well-versed in the theology of financial stewardship. We know that the widow’s mite matters and that we must be accountable for every penny dropped in the offering plate. But in the 21st century, currency is not just money; it is information.
When a visitor fills out a "welcome" card, when a parent registers their child for a holiday club, or when a congregation member sets up a standing order, they are entrusting us with their digital identity.
In the Parable of the Talents (Matthew 25v14-30), the commendation "well done, good and faithful servant" is reserved for those who managed their master's resources with wisdom and diligence.
Today, "resources" includes the personal data of the flock. If we leave a physical church door wide open overnight, we are negligent of the physical building God has given us. If we leave our digital doors wide open (using weak passwords or ignoring software updates) we are being negligent with the digital trust God has given us. Protecting data is protecting people, and protecting people is a fundamental act of pastoral care.
"Protecting data is protecting people, and protecting people is a fundamental act of pastoral care."
The theology of the watchman
The Bible is no stranger to the concept of security. The book of Nehemiah offers a compelling paradigm for us today.
When Nehemiah set out to rebuild Jerusalem, he didn't just focus on the temple; he rebuilt the walls and the gates. He understood that for the community to flourish and worship freely, they needed a perimeter of protection.
In Nehemiah 4v9, we read: "But we prayed to our God and posted a guard day and night to meet this threat." Notice the balance: dependence on God ("we prayed") coupled with practical responsibility ("posted a guard").
Cybersecurity is the modern equivalent of posting a guard. It is not an act of fear or a lack of faith in God’s sovereignty. Rather, it is the practical outworking of wisdom. We install smoke alarms not because we live in fear of fire, but because we value life. We must install digital safeguards not because we fear hackers, but because we value the ministry and the people it serves.
A spirit of power, not fear
It is easy to become paralysed by the headlines. The world of cybercrime is vast and often frightening. However, Paul reminds Timothy: "For God has not given us a spirit of fear, but of power and of love and of a sound mind" (2 Timothy 1v7).
A "sound mind" in the Greek implies self-discipline and sensible judgment. A fear-based approach to cybersecurity leads to paranoia or paralysis, such as burying the talent in the ground because we are afraid to lose it. A stewardship-based approach leads to empowerment.
We need to shift the narrative in our churches and Christian organisations. Cybersecurity isn't about stopping ministry; it's about sustaining it. A ransomware attack can lock a church out of its files for weeks, halting pastoral emails, finance processing, and sermon preparation. By taking sensible precautions, we ensure the work of the gospel continues unhindered.
Cybersecurity: Loving your digital neighbour
Perhaps the most compelling Christian argument for cybersecurity is the command to love our neighbour as ourselves (Mark 12v31).
In the digital age, a cyberattack on a church rarely stops at the church server. If a church email account is compromised, it can be used to send fraudulent emails to the entire congregation, such as asking for "urgent help" or "gift cards" in the name of the pastor. We have all seen these scams.
When we secure our systems, we are protecting the vulnerable in our pews from being preyed upon. We are protecting the reputation of the church, ensuring that the name of Jesus is not associated with negligence or scandal. As Proverbs 22v1 reminds us: "A good name is more desirable than great riches."
In an era of deep scepticism toward institutions, retaining the trust of our community is a precious commodity we cannot afford to lose through carelessness.
Practical wisdom: Where to start?
If we agree that this is a spiritual imperative, what does "posting a guard" look like practically? It does not require a degree in cybersecurity. It requires a culture of mindfulness.
- The "keys" to the kingdom (passwords): Just as we wouldn't give a front door key to someone who left the church five years ago, we must ensure our digital access is tidy. Use strong, unique passwords. A password manager is a great tool for church teams. Most importantly, turn on Two-Factor Authentication (2FA) wherever possible. This is the digital equivalent of a deadbolt; even if a thief gets the key (password), they can’t get in without the second factor (usually a code on your phone).
- Equipping the saints (training): Most breaches are not caused by complex hacking, but by simple human error—clicking a link in a phishing email. Train your staff and volunteers. Create an environment where it is okay to ask "Does this email look right?" before clicking. Openness beats secrecy.
- Updates as maintenance: We fix the church roof when it leaks. We must also update our software. Those annoying "update now" pop-ups on Windows or macOS are often patching security holes. Clicking "update" is a five-minute act of stewardship.
- Backups: If the worst happens, having a secure, offline backup of your data means the difference between a disaster and a nuisance. It is the "storehouse" principle of Joseph, preparing for the lean times during the years of plenty.
"Clicking "update" is a five-minute act of stewardship."
Conclusion
In Colossians 3v23, Paul writes: "Whatever you do, work at it with all your heart, as working for the Lord, not for human masters." This "whatever" includes how we manage our passwords, how we store donor data, and how we protect our networks.
Cybersecurity is not a secular intrusion into sacred space; it is a necessary support structure for our ministry.
Let us not wait for a crisis to force our hand. Let us instead embrace this responsibility proactively, as wise builders and faithful stewards, ensuring that our digital gates are secure so that the work of the Kingdom can flourish within.
If you are seeking practical assistance in strengthening the digital walls of your church or Christian organisation, please reach out. We would be glad to help you embrace this vital stewardship responsibility.
You can contact me directly at tristram@crestlinecybersecurity.com or visit our website where you will find more free resources and guides at crestlinecybersecurity.com.
Are Christian charities more at risk of hacking?
Christian churches, organisations, and charities are entrusted with managing resources – donations, grants, and assets – to fulfil their missions. …