The vast majority of churches don’t require a security consultant to highlight vulnerabilities. What they need is someone who will walk through the building with a notepad and take note of things they have ceased to see. This is the philosophy behind a property risk assessment – and it is easily achievable in an afternoon with a volunteer team.
Start By Walking The Property Like A Stranger
Before you open a spreadsheet or pick up a phone, walk the whole property as if you’ve never been there. Start outside. Try every door, even the one everyone knows is broken. Assess fences, gates, and the tree line at the edge of the parking lot. Then go inside and try windows, stairwells, basements, and the rooms no one mentions in the official count – the old choir robe closet, the storage closet behind the fellowship hall, the crawl space under the stage.
This is important because people become blind to risk through familiarity. A pastor who’s walked past the same propped-open side door every week for six years no longer registers it as an issue. A volunteer who’s used the same key to unlock the boiler room since 2015 never stops to think about who else might have a copy of that key. Fresh eyes notice what routine conceals.
Bring a phone with a camera and take a picture of anything that gives you pause. You’ll need it later on.
Sort What You Find Into Three Buckets
Not every gap is the same kind of gap, and treating them all as equal is how remediation plans get overwhelming and never finished. Split your findings into three categories:
1. Property crime and theft
2. Catastrophic property damage
3. Human-caused emergency
This sorting does something useful – it forces you to prioritize by likelihood and impact instead of by whatever feels scariest in the moment. A missing smoke detector in the nursery is a higher-priority fix than an unmonitored back gate, even though the gate might feel more alarming.
Active shooter incidents get outsized attention, and for good reason – the FBI recorded 61 active shooter incidents in 2021, up from just 20 in 2016, more than triple in five years. But that stat shouldn’t push you to ignore the fire extinguisher that expired two years ago. Real risk management covers all three buckets, not just the one that makes headlines.
Run A Focused Access Review
Access control is where most gaps hide, and it’s the cheapest category to fix. Pose four simple questions and record the responses you don’t want to hear.
Who holds keys and is there an accurate master key inventory? Which doors are routinely propped open during events, coffee hours, or kids’ drop-off, and for what reason? Where are the blind spots for your video surveillance system – the side entrance, the parking lot corner, the hall near the nursery? Does the exterior lighting cover all entry points and walkways or does it fade out right where someone would want it to?
These topics of concern are not merely about the theoretical bad guy. It’s also about identifying who’s in the building when an event is still going on at 9:00 p.m. on a Tuesday night and whether they have free rein in areas not under their supervision like the kitchen or utility room.
Turn Your Findings Into A One-Page Risk Map And Timeline
After you’ve walked the property and sorted your findings, put it all on one page. Each gap, which bucket it goes in, a rough cost to fix. Then go for the low-hanging fruit first – what’s least expensive and can be done quickest: rekeying doors, motion-sensor lighting, signage for emergency exits, fixing the one camera that’s been pointed at a wall since last spring.
This is the point at which your organization needs to look around and decide how to proceed. Some boards try to go it alone, handle all volunteer labor. Some call in a paid consultant to do a full audit. And a growing number are looking at coverage built specifically for their situation, because a documented risk map paired with the right plan can help protect buildings from unexpected incidents in a way that ad-hoc fixes never fully manage.
Leaving gaps undocumented doesn’t just cost money if something happens – it can cost you leverage during a claim or renewal, when an insurer asks what steps you’d already taken.
Loop In Your Insurance And Finance People Early
Be sure to involve the people that manage your insurance and budget well before the assessment gets underway. Documented improvements – new locks, better lighting, an emergency action plan on file – can support better coverage terms down the line. Insurers respond to evidence, not intentions. A binder full of before-and-after photos and a remediation timeline is worth more in a renewal conversation than a verbal promise that “we’re working on it.”
This also keeps your finance team from being blindsided when the remediation list comes with a price tag. Early involvement means fewer surprises and faster approval when it’s time to actually spend money on fixes.
Build The Emergency Action Plan Around What You Found
The physical fixes are meaningless unless they are tied to an actual plan. Once your risk map is complete, use it to create or update your emergency action plan – who locks doors during a lockdown, how your staff connects to a mass notification system, where children’s ministry volunteers move kids during an evacuation, and who is tasked with ensuring that after-hours renters locked up properly.
An emergency action plan based on real data from your own building simply functions better than something generic you downloaded off the Internet.
A property risk assessment doesn’t demand a badge, a certification, or a big budget. It demands a Saturday, a clipboard, and the willingness to view your own building as you’ve never seen it before. Start there, and the rest of the plan writes itself.
