Church Risk Management: A Practical Ministry Checklist

Risk management is not fear-driven ministry.

It is the disciplined practice of identifying foreseeable harm, reducing unnecessary exposure, responding well when problems occur, and protecting the people entrusted to the church.

No checklist eliminates risk.

A church should work with qualified legal counsel, insurance professionals, accountants, and safeguarding specialists familiar with local law.

Governance

Confirm that:

• bylaws are current
• actual practice matches governing documents
• authority is defined
• conflicts of interest are disclosed
• board minutes are maintained
• complaints have a clear route
• leaders can be removed through a defined process
• serious allegations receive independent review

Governance failure magnifies every other risk.

Child and Youth Safety

At minimum:

• written child-protection policy
• background screening
• reference checks
• two-adult or comparable supervision rules
• check-in and release procedures
• restroom and diapering protocols
• transportation rules
• digital communication boundaries
• mandatory-reporting training
• prompt documentation

Screening alone is not a complete safety system.

Vulnerable Adults

Consider protection for adults facing:

• disability
• cognitive impairment
• dependency
• homelessness
• incarceration
• domestic abuse
• financial vulnerability

Train leaders to recognize exploitation and report concerns.

Sexual Misconduct and Abuse Response

Policies should address:

• staff and volunteer boundaries
• counseling relationships
• harassment
• grooming
• reporting
• immediate safety
• preservation of evidence
• communication with authorities
• survivor care
• independent investigation

Never handle alleged criminal conduct only as an internal spiritual matter.

Emergency Planning

Prepare for:

• medical emergency
• fire
• severe weather
• violence
• missing child
• evacuation
• utility failure
• disaster
• communicable illness

Assign roles and maintain:

• emergency contacts
• first-aid supplies
• AEDs where appropriate
• evacuation maps
• reunification procedures
• trained responders

Practice the plan.

Facilities

Inspect regularly:

• exits
• lighting
• stairs
• handrails
• playgrounds
• kitchens
• electrical systems
• HVAC
• roofs
• parking lots
• accessibility
• security hardware

Document maintenance and repairs.

Deferred maintenance can become injury, expense, and ministry interruption.

Insurance

Review coverage with a church-experienced professional.

Consider:

• general liability
• property
• abuse and molestation
• directors and officers
• employment practices
• workers’ compensation
• cyber liability
• vehicles
• counseling
• mission travel
• umbrella coverage

Understand exclusions, deductibles, reporting deadlines, and required procedures.

Financial Risk

Use:

• segregation of duties
• monthly reconciliation
• dual control for cash
• documented approvals
• restricted-fund tracking
• expense policies
• fraud reporting
• independent review
• secure giving systems

Financial trust can be lost quickly.

Employment

Maintain:

• job descriptions
• classification review
• payroll compliance
• leave policies
• anti-harassment procedures
• complaint routes
• performance documentation
• termination process
• personnel-file security

Churches should not assume religious status removes every employment obligation.

Volunteers

Define:

• application
• screening
• training
• supervision
• role limits
• incident reporting
• removal
• renewal

Long-term familiarity should not exempt people from policy.

Transportation

Address:

• driver approval
• license checks
• insurance
• vehicle maintenance
• seat belts
• child restraints
• supervision
• rented vehicles
• personal vehicles
• international travel

Do not allow convenience to override safety.

Data and Cybersecurity

Protect:

• donor data
• children’s information
• counseling notes
• prayer requests
• passwords
• payment systems
• staff records

Use:

• multifactor authentication
• role-based access
• secure backups
• device policies
• breach response
• vendor review
• data-retention rules

Digital ministry creates real pastoral and legal obligations.

Counseling and Pastoral Care

Clarify the difference between pastoral care and licensed clinical treatment.

Policies should address:

• competence
• referral
• documentation
• confidentiality limits
• suicidal or homicidal risk
• abuse reporting
• opposite-sex boundaries
• emergency response

Pastors should not practice beyond training.

Events and Outside Groups

For weddings, rentals, sports, concerts, camps, and community events, define:

• contracts
• insurance certificates
• supervision
• food safety
• security
• alcohol policy
• damage responsibility
• accessibility
• emergency procedures

Informal agreements create ambiguity.

Missions and Travel

Assess:

• destination risk
• medical needs
• passports and consent
• background screening
• travel insurance
• emergency evacuation
• local partnerships
• minors
• safeguarding
• financial handling
• cultural preparation

Short-term enthusiasm should not replace planning.

Incident Response

When an incident occurs:

1. protect people
2. call emergency services when necessary
3. meet reporting obligations
4. notify insurers and counsel
5. document facts
6. preserve evidence
7. avoid speculative public statements
8. provide pastoral care
9. review systems
10. implement corrections

Do not prioritize reputation over truth.

Annual Risk Review

At least annually review:

• policies
• insurance
• training
• incidents
• facilities
• background checks
• cyber systems
• financial controls
• emergency plans
• legal changes
• ministry expansion

Assign responsibility and deadlines.

Practical Risk Register

Maintain a table with:

• risk
• likelihood
• severity
• current controls
• owner
• next action
• review date

Focus first on risks with high potential harm, especially abuse, violence, financial fraud, and unsafe facilities.

Risk management serves ministry by protecting people, sustaining trust, and helping the church respond faithfully when the unexpected occurs.