Over 40 Years in BusinessISO 27001 compliantPublic sector: GSA · CMAS & TESMA (CA)
LA 562-298-5000 · Chicagoland 312-432-5300 · Phoenix 602-733-6807 · Client Support
Nonprofits and churches hold donor records, member directories, giving history and sometimes sensitive client information, usually protected by a small staff and a lot of trust. Scammers know it. BTI helps nonprofits and churches stop impersonation scams, protect donor data and online giving, prepare for ransomware and answer cyber insurance questions, with 24/7 monitoring through our SOC 2 audited NOC/SOC partner.
Get a Free Cybersecurity AssessmentBook a Managed IT, Co-Managed IT or AI AssessmentCall 800-435-7284
Business email compromise is one of the costliest scams the FBI tracks, with about $2.77 billion in reported losses in 2024 (FBI IC3 2024 report). CISA offers cyber resources for nonprofits and civil society groups facing these threats (CISA high-risk communities).
If you accept cards online, at kiosks or at events, the PCI Data Security Standard applies. The simplest path is to keep card data with your payment processor and out of your systems. BTI helps you:
Nonprofits that run clinics, behavioral health or recovery programs have additional privacy obligations. BTI's healthcare cybersecurity team supports those programs. → Healthcare cybersecurity and compliance
Tested, immutable backups, 24/7 managed detection and response, and a short incident plan your team has practiced, following CISA #StopRansomware guidance.
Insurers commonly ask about MFA, endpoint detection and response, tested backups, email security and training. BTI helps you answer accurately and close gaps before renewal.
BTI maps your program to the NIST Cybersecurity Framework 2.0 and uses CISA Cyber Essentials for smaller organizations, so your board sees where you stand and what to fund next.
Security sticks when the same team runs the IT. BTI's managed and co-managed IT plans keep devices patched, backups tested and volunteer accounts clean. → IT services for nonprofits and churches
Barna and Pushpay found that only 5% of churches have AI guidelines, while 83% of church leaders are concerned about data privacy (Barna). That gap is where donor lists, prayer requests and client notes end up in free AI tools. As your Guided Automation Partner, BTI writes a board-ready AI use policy, provides a governed AI workspace, uses data loss prevention to keep sensitive data in, reviews AI features switched on inside your donor and office software, and adds voice-clone checks to payment verification. Governance follows the NIST AI Risk Management Framework. → AI for nonprofits and churches · AI security, governance and risk
Nonprofit & Faith-Based: Overview · IT Services
If you accept card payments, PCI DSS applies. Using your payment processor's hosted giving pages and keeping card data out of your systems shrinks what you have to secure.
Set a rule that leaders never request gift cards or payments by email or text, verify any request by calling a known number, turn on MFA and impersonation filtering, and train staff and volunteers.
Typical requirements include MFA, endpoint detection and response, tested backups, email security and security awareness training.
Not into consumer tools. BTI sets an AI use policy, provides a governed workspace and uses data loss prevention to keep donor and member data inside your environment.
Get a Free Cybersecurity AssessmentBook an AI Opportunity AssessmentCall 800-435-7284
Tell us about your sites and systems. An engineer replies within one business day on new design and technical sales inquiries.