The news is largely tales of disorder and disaster leading to feelings of discouragement and detachment. Troubles from active shooters to natural disasters beset the houses of God. Guided by their leaders, churches are responsible for safeguarding their congregations and visitors from harm. This article teaches why church security is important, how to assess security risk, and the basics of a comprehensive plan.
By Mark D. Harris, MD, MPH, MBA, MDiv, ThM, PhD, DBA
While the need for enhanced security in churches may seem like a modern concern, protecting places of worship has been a consideration throughout history. Christians and their churches were attacked and destroyed both by mobs and by the government in ancient Rome, from Nero (AD 37-68) to Diocletian (AD 242-312). Eastern and Western Christians sometimes damaged each other’s churches and persecuted people, as in the Byzantine centuries. The most notorious example in the Middle Ages is the destruction of the Church of the Holy Sepulcher in Jerusalem by the Fatimid Caliph Al-Hakim bi-Amr Allah in 1009.
Attacks on Christians and churches continued into the modern era. Muslim powers continued to persecute Christians. Ottomans butchered Christians and leveled churches in the early 20th century. The Nazis, Soviets, and Chinese Communists killed and imprisoned millions of Christians and eliminated churches in the 20th century. These threats were governmental and institutional, but destruction also came from the hands of hateful mobs.
The nature and scale of threats have grown, particularly in recent decades. Governmental attacks on Christians have been replaced in many places by smaller-scale attacks mounted by one or a few people. The number of these attacks has increased in the past century.
Current Landscape
In the 21st century, churches face a range of security challenges:
- Active Shooter Incidents: High-profile mass shootings in places of worship have heightened awareness of this threat. In 2017, Devin Smith killed 26 people at the First Baptist Church of Sutherland Springs in 2017, Dylann Roof killed 9 at a prayer meeting at the Emanuel African Methodist Episcopal Church in Charleston SC. Mosques and synagogues have also been attacked.[1]
- Hate Crimes: Religious institutions have been targeted due to their beliefs or the demographics of their congregation.[2]
- Theft and Vandalism: Churches often house valuable items and may be seen as soft targets for property crimes.
- Domestic Violence Spillover: Family disputes can sometimes escalate and spill over into church settings.
- Child Safety Concerns: With many churches offering children’s programs, ensuring child safety is paramount. A two-year-old was kidnapped from the nursery at the Riverview Baptist Church in Ripplemead VA in 2021.[3]
- Medical Emergencies: Large gatherings increase the likelihood of medical incidents occurring on church property.
- Natural Disasters: Churches must be prepared for environmental hazards relevant to their location. These seem to be getting worse, as church insurers are increasingly raising prices or even dropping coverage in some places.[4]
- Cybersecurity Threats: As churches increasingly use digital platforms, they become potential targets for cyber-attacks.[5]
In its 2020 report, the US Cybersecurity and Infrastructure Security Agency (CISA) within the Department of Homeland Security analyzed 37 incidents involving houses of worship from 2009 to 2019.[6] The CISA found:
- CISA observed a significant spike in incidents of targeted violence in 2012 and a discernible increase in the number of incidents between 2015 and 2019. As a result of these 37 incidents, 64 people lost their lives and 59 people suffered injuries.
- Fifty-four percent (n=20) of the attacks were an armed assault of some kind, including shootings, edged weapons, and vehicular assaults. Five of the attacks qualified as mass shootings.
- CISA determined that 67 percent (n=25) of the attacks were motivated by hatred of a particular racial or religious identity and that 22 percent (n=8) were connected to a domestic dispute or personal crisis. The motivation for the remaining 11 percent (n=4) is unknown.
- Of the 36 known perpetrators in these incidents, 58 percent (n=21) engaged in some form of planning behavior indicating their intention to carry out an attack
Though the absolute number of such incidents is small, the frequency of events increased over that period.
Changing Perceptions
The implementation of security measures in churches can be a sensitive topic. Some may view visible security as contradictory to the idea of a church as a place of worship, refuge, and welcome. However, as awareness of potential threats grows, many congregations are recognizing that responsible security measures can enhance their ability to serve as a haven for their communities.
In the past, churches hesitated to have security beyond locked doors, believing that God alone protected His church. While the ultimate protection is from the Lord and Him alone, churches in the modern day are thinking more about what to do in case of emergency, disaster, or active shooter. The Bible speaks about people defending themselves.
- Moses defended the daughters of Jethro when other shepherds drove them and their father’s flock away from the watering hole (Ex. 2:16-17).
- Levites were not only to help priests in their service and administration, but also to be guards for the Tabernacle, and later for the Temple (Numbers 1:53).
- When Mordecai became Prime Minister of Persia, he authorized the Jews to defend themselves when attacked (Esther 8:9-11).
- Gedaliah, the regent of Judah under Nebuchadnezzar, failed to act after being warned of a plot against him. He was murdered (Jeremiah 40:9 to 41:3).
- Nehemiah and his followers prayed, built, and guarded the wall of Jerusalem at the same time (Nehemiah 4:9).
These passages, admittedly all Old Testament origin, show how wise men had faith in God, doing what He told them to protect His people. Christians today must strike a wise balance between protecting themselves and their churches and welcoming the poor, the sick, the widow, the orphan, and anyone else who wants to find the Lord.
A Lifeway survey showed that armed congregants protect more than 50% of Protestant churches. Eighty-one percent say that they have a security plan. Figure 1 illustrates some of the tactics and methods used by perpetrators against churches and other houses of worship.
Performing a Comprehensive Risk Assessment
- Identify Assets: List all physical, human, and intangible assets the church needs to protect.
- Buildings and facilities – The team will want to include every building on their campus, on other campuses, and buildings or properties elsewhere.
- People (staff, volunteers, congregants) – Who works at your church, and when do they work there? What threats are they likely to face? Do they feel secure where and when they work?
- Valuable items (artwork, historical artifacts, technology)
- Reputation and community standing
- Financial assets
- Identify Threats: Consider potential hazards or malicious actions that could harm these assets.
- Criminal activities (theft, vandalism, assault)
- Environmental hazards (fire, flood, severe weather)
- Health and safety risks
- Cyber-threats
- Assess Vulnerabilities: Evaluate weaknesses in current security measures or practices.
- Unsecured entry points
- Lack of surveillance or alarm systems
- Inadequate emergency response plans
- Insufficient staff training
- Analyze Risks: Consider the likelihood and potential impact of each identified threat.
- Use a risk matrix to prioritize threats based on probability and severity
- Consider both immediate and long-term consequences
- Review Existing Controls: Evaluate the effectiveness of current security measures.
- Physical security features
- Policies and procedures
- Training programs
- Insurance coverage
- Determine Risk Appetite: Decide what level of risk is acceptable to the church leadership and community.
- Develop Risk Mitigation Strategies: Based on the assessment, create plans to address identified risks.
- Risk Assessment is heavily influenced by where the church is, its size and layout, and what it does. Key factors to consider include:
- Location: The church’s geographical location can influence the threats it may face. Urban churches may be more susceptible to vandalism and theft, while rural churches might face different challenges.
- Size and Layout: The size and layout of the church building and grounds can impact security measures. Larger churches with multiple entry points may require more extensive security systems.
- Activities and Events: The nature and frequency of church activities and events can also affect security needs. Special events, large gatherings, and high-profile speakers may require additional security measures.
Developing a Comprehensive Security Plan
Security Policies and Procedures
- Access control policies
- Key management
- Incident reporting procedures
- Cash handling guidelines
- Child safety protocols
- Social media and online communication policies
- Security Team Structure
- Roles and responsibilities
- Chain of command
- Recruitment and vetting processes
- Training requirements
- Emergency Response Protocols
- Active shooter response
- Medical emergency procedures
- Fire evacuation plans
- Severe weather protocols
- Missing child procedures
- Communication Plan
- Internal communication during emergencies
- External communication with media and community
- Regular security updates to the congregation
- Training Program
- General security awareness for all staff and volunteers
- Specialized training for security team members
- Regular drills and exercises
- Technology and Equipment
- Surveillance systems
- Access control technology
- Communication devices
- First aid and emergency response equipment
- Partnerships and Coordination
- Relationships with local law enforcement
- Coordination with neighboring businesses or organizations
- Involvement in community safety initiatives
- Budget and Resource Allocation
- Funding for equipment and technology
- Training costs
- Staffing expenses (if using professional security)
- Compliance and Legal Considerations
- Ensuring adherence to relevant laws and regulations
- Liability considerations
- Insurance requirements
- Evaluation and Improvement Process
- Regular review of security measures
- Incident analysis and lessons learned
- Continuous improvement strategies
Emergency Response Plan
- Clear Chain of Command
- Designated incident commander
- Backup leadership in case primary leaders are unavailable
- Communication Protocols
- Internal communication methods (e.g., radios, panic buttons)
- External communication with emergency services
- Procedures for notifying congregation members
- Evacuation Procedures
- Multiple evacuation routes
- Designated assembly points
- Considerations for individuals with disabilities
- Shelter-in-Place Procedures
- Identified safe rooms or areas
- Supplies for extended shelter situations
- Medical Response
- First aid stations and equipment
- Trained medical personnel within the congregation
- AED locations and trained operators
- Reunification Procedures
- System for accounting for all individuals
- Designated reunification area
- Procedures for releasing children to guardians
- Media Management
- Designated spokesperson
- Guidelines for interacting with media during crises
Conclusion
An atheist murdered 26 parishioners on a Sunday morning at the First Baptist Church in Sutherland Springs TX (2017). A white man murdered nine African Americans during a Wednesday prayer meeting in Charleston SC (2015). Not all cases end badly. Another walked into a church and tried to shoot the pastor during the sermon, but his handgun misfired. The assailant was tackled and disarmed. Churches are not alone in their risk. A former student and transgender male shot and killed three students and three faculty at a private Christian school in Nashville (2023). Christian organizations are also not alone. A sniper killed 60 and wounded at least 400 people attending a country music festival in Las Vegas NV (2017).
Our security is ultimately not in man or in anything that man can do. However, God works through normal processes most of the time, and He expects His people to use those processes to do His will. The Lord made bread and fish to feed 5,000 (John 6), but He expected His church to feed the hungry in the normal way (Acts 6). This article will guide leaders, especially in churches and other Christian organizations, to improve their security to protect their people, while keeping the church welcoming to those who seek Christ there.
[1] https://www.sltrib.com/news/nation-world/2017/11/06/a-list-of-some-us-house-of-worship-shootings-since-2012/AP%202017/AP%202017/AP%202017/AP%202017/.
[2] https://www.cisa.gov/sites/default/files/publications/Mitigating%20Attacks%20on%20Houses%20of%20Worship%20Security%20Guide_508_0_0.pdf.
[3] https://www.foxnews.com/us/virginia-woman-boyfriend-charged-kidnapping-boy-2-church-nursery?msockid=205e6083765b600b0709721c7709612b.
[4] https://www.baptiststandard.com/news/nation/perfect-storm-leads-major-insurers-to-drop-churches/.
[5] https://www.cisa.gov/sites/default/files/publications/Mitigating%20Attacks%20on%20Houses%20of%20Worship%20Security%20Guide_508_0_0.pdf.
[6] https://www.cisa.gov/sites/default/files/publications/Mitigating%20Attacks%20on%20Houses%20of%20Worship%20Security%20Guide_508_0_0.pdf.
