Cybersecurity Starts with People

By Mary Beth Foster, TPF’s Vice President & Treasurer

At Texas Presbyterian Foundation, we exist to enable and expand mission. That includes protecting the trust, relationships, and resources that support the ministries and non-profit organizations we serve. Cybersecurity is not only a technology issue, but also a people issue.

So, what can churches and nonprofits do to build a protective culture of cybersecurity in their organizations?

Build Awareness Early

A people-first cybersecurity culture starts on day one. Including cybersecurity in employee onboarding helps staff see security as part of their everyday responsibilities, from handling sensitive information to using digital tools wisely.

Create a Culture of Trust

People are more likely to report mistakes or suspicious activity when they know they will be met with support instead of blame. Encouraging openness helps organizations respond more quickly and effectively when threats arise.

Make Reporting Clear

Every organization needs clear reporting and response protocols. A strong plan should outline how to respond to an incident, meet any compliance obligations, and communicate appropriately with donors, stakeholders, and other key partners.

Let Leadership Set the Tone

When executives and senior leaders consistently prioritize cybersecurity, the rest of the organization follows. Visible leadership reinforces that security is essential to good stewardship and mission success.

Focus on the Human Element

Cybersecurity is shaped by more than systems and policies. Stress, fatigue, trust, and fear can all affect how people respond to threats. Training should be relevant to different roles, and organizations should make space for honest conversations and support when incidents occur.

Start with Practical Steps

A few key actions can strengthen your cybersecurity foundation:

• Require multi-factor authentication
• Maintain a consistent backup schedule
• Review the security practices of third-party vendors
• Develop an incident response plan
• Shift from reactive fixes to proactive protection

Cybersecurity is about more than protecting data. It is about protecting people and preserving the mission they serve.

TPF provides a wide variety of services to support our partners. For additional information about ways you can enable and expand your own mission through legacy giving CLICK HERE to check out TPF’s Legacy Builder educational tool.