Over 40 Years in BusinessISO 27001 compliantPublic sector: GSA · CMAS & TESMA (CA)

LA 562-298-5000 · Chicagoland 312-432-5300 · Phoenix 602-733-6807 · Client Support

Nonprofit & Faith-Based solutions: Overview · AI · Security Systems · IT Services · Cybersecurity & Compliance · Communications

Nonprofit and Church Cybersecurity and Compliance

Nonprofits and churches hold donor records, member directories, giving history and sometimes sensitive client information, usually protected by a small staff and a lot of trust. Scammers know it. BTI helps nonprofits and churches stop impersonation scams, protect donor data and online giving, prepare for ransomware and answer cyber insurance questions, with 24/7 monitoring through our SOC 2 audited NOC/SOC partner.

Get a Free Cybersecurity AssessmentBook a Managed IT, Co-Managed IT or AI AssessmentCall 800-435-7284

Why Scammers Target Nonprofits and Churches

  • Public staff directories make it easy to impersonate a pastor or executive director
  • Gift card and wire requests that look like they come from leadership
  • AI voice clones that sound like a real leader on the phone
  • Volunteers and shared accounts that are hard to track

Business email compromise is one of the costliest scams the FBI tracks, with about $2.77 billion in reported losses in 2024 (FBI IC3 2024 report). CISA offers cyber resources for nonprofits and civil society groups facing these threats (CISA high-risk communities).

Stop Impersonation Scams

  • MFA on every email and finance account
  • Email authentication (SPF, DKIM, DMARC) and impersonation filtering that flags lookalike addresses
  • Verify-by-phone rules for any gift card, wire or payment change request, using a known number
  • Short, real-world training for staff and key volunteers, including AI voice scams

Donor Data and Online Giving: PCI DSS Basics

If you accept cards online, at kiosks or at events, the PCI Data Security Standard applies. The simplest path is to keep card data with your payment processor and out of your systems. BTI helps you:

  • Confirm giving pages and kiosks use the processor's hosted or tokenized payment forms
  • Separate kiosks and event card readers from guest and staff networks
  • Lock down who can see donor and giving records

→ What is PCI compliance?

Health, Recovery and Counseling Programs

Nonprofits that run clinics, behavioral health or recovery programs have additional privacy obligations. BTI's healthcare cybersecurity team supports those programs. → Healthcare cybersecurity and compliance

Ransomware Readiness

Tested, immutable backups, 24/7 managed detection and response, and a short incident plan your team has practiced, following CISA #StopRansomware guidance.

Cyber Insurance Questionnaires

Insurers commonly ask about MFA, endpoint detection and response, tested backups, email security and training. BTI helps you answer accurately and close gaps before renewal.

A Right-Sized Framework

BTI maps your program to the NIST Cybersecurity Framework 2.0 and uses CISA Cyber Essentials for smaller organizations, so your board sees where you stand and what to fund next.

Assessment, vCISO and 24/7 SOC

Cybersecurity assessment, a fractional CISO for board and insurer conversations, and 24/7 monitoring through BTI's SOC 2 audited NOC/SOC partner: 10,000+ alerts handled, zero missed. 94% of BTI clients pass audits on the first attempt. → Cybersecurity assessmentvCISOIT compliance

Managed IT Behind It

Security sticks when the same team runs the IT. BTI's managed and co-managed IT plans keep devices patched, backups tested and volunteer accounts clean. → IT services for nonprofits and churches

AI Governance: Donor and Member Data Stay Private

Barna and Pushpay found that only 5% of churches have AI guidelines, while 83% of church leaders are concerned about data privacy (Barna). That gap is where donor lists, prayer requests and client notes end up in free AI tools. As your Guided Automation Partner, BTI writes a board-ready AI use policy, provides a governed AI workspace, uses data loss prevention to keep sensitive data in, reviews AI features switched on inside your donor and office software, and adds voice-clone checks to payment verification. Governance follows the NIST AI Risk Management Framework. → AI for nonprofits and churches · AI security, governance and risk

Why BTI

ISO 27001 compliantSOC 2 audited NOC/SOC partner94% first-attempt audit pass rateover 40 years98% client retentionadvisor reply within one business day

Related

Nonprofit & Faith-Based: Overview · IT Services

Frequently Asked Questions

Do churches need PCI compliance for online giving?

If you accept card payments, PCI DSS applies. Using your payment processor's hosted giving pages and keeping card data out of your systems shrinks what you have to secure.

How do we stop "pastor" gift card scams?

Set a rule that leaders never request gift cards or payments by email or text, verify any request by calling a known number, turn on MFA and impersonation filtering, and train staff and volunteers.

What do insurers require from nonprofits?

Typical requirements include MFA, endpoint detection and response, tested backups, email security and security awareness training.

Can staff paste donor lists into AI tools?

Not into consumer tools. BTI sets an AI use policy, provides a governed workspace and uses data loss prevention to keep donor and member data inside your environment.

Tell us about your sites and systems. An engineer replies within one business day on new design and technical sales inquiries.

Communication

Let’s Start a Conversation

What’s the best way for us to contact you?

Call 800-435-7284
IT Services

Let's Start a Conversation

What's the best way for us to contact you?

Top quality brands, expert engineering, transparent cost, and measurable ROI.