Faith-Based Daily Awareness Post 14 October 2026

These updates are shared to help raise the situational awareness of Faith-Based organizations to best defend against and mitigate the impacts from all-hazards threats including physical security, cybersecurity, and natural disasters.

White Paper: The Hostile Event Attack Cycle (HEAC), 2026 Update

The Gate 15 white paper, The Hostile Event Attack Cycle (HEAC), 2026 Update, examines the seven phases of hostile event planning; initial target considerations, initial surveillance and research, target selection, planning and rehearsals, pre-attack operations, the attack, and the escape. The update incorporates lessons from recent incidents and explores evolving threats, including online radicalization, encrypted communications, drones, and artificial intelligence (AI) in attack planning.

The paper emphasizes recognizing warning signs and intervening before an incident occurs. It provides practical resources, including phase-specific indicators, checklists, and sample reporting procedures. Recommended measures include employee awareness training, physical security improvements, behavioral threat assessment teams, information sharing, and rehearsed incident response plans.

FL: Bomb threat reported at Boca Raton Jewish academy, PBSO says

A bomb threat reported at Donna Klein Jewish Academy in Boca Raton, Florida, on October 12, 2026, prompted an evacuation, a significant law enforcement response, and traffic delays in the surrounding area. The Palm Beach County Sheriff’s Office (PBSO) confirmed the threat and evacuation. As of the October 13 update, authorities had not disclosed what prompted the threat or whether any suspicious items had been found.

Analyst Comments: Bomb threats targeting Jewish schools and other religious institutions can disrupt operations, create safety concerns, and require significant law enforcement resources, even when no suspicious items are found. These incidents highlight the importance of preparedness and clear communication during potential threats.

Faith-based organizations can review evacuation procedures, establish communication protocols with local law enforcement, and ensure staff know how to report threats promptly. Additional considerations include:

• Emergency procedures: Review evacuation plans and identify designated assembly areas.
• Threat reporting: Establish clear procedures for reporting suspicious communications or potential threats.
• Communication: Prepare methods to notify staff, families, and law enforcement during an incident.
• Coordination: Maintain relationships with local law enforcement and emergency responders to support timely responses.

Resources:

• CISA Bomb Threat Checklist
• K-12 Bomb Threat Preparedness and Response Resources

5 blind spots in church risk planning most administrators miss

The article highlights five areas where religious organizations may have insurance gaps as their operations evolve beyond the original insurance they may have negotiated years ago:

• Volunteer screening that stops at “works with children”: Screening policies may overlook volunteers who have regular access to minors outside formal child-related roles.
• Property valuations that haven’t kept pace with construction costs: Outdated valuations or unreported renovations may leave buildings underinsured after damage or a total loss.
• Outside groups using the building without a real agreement: Informal facility-use arrangements can create uncertainty over liability and insurance responsibilities if someone is injured.
• Informal groups operating without written protocols: Youth programs, counseling, home visits, and transportation activities may lack clear safety guidelines and volunteer responsibilities.
• Digital activities and data exposure: Online giving platforms, livestreams, or member databases introduce cybersecurity and privacy risks that existing insurance policies may not adequately cover.

The article recommends reviewing these areas annually and consulting insurance providers to ensure coverage and safety procedures reflect the organization’s current activities.

Analyst Comments: Religious organizations can reduce potential liability and coverage gaps by reviewing insurance policies alongside current operations and safety procedures. Annual reviews can help identify outdated coverage, undocumented activities, and changes that may affect risk exposure.

Consider consulting insurance providers to confirm coverage for property damage, facility use by outside groups, volunteer-related incidents, and cyber risks.

FB-ISAO Releases an All-Faiths Analysis of Attacks on U.S. Houses of Worship in 2025

The Faith-Based Information Sharing and Analysis Organization (FB-ISAO) released its third annual analysis of attacks on U.S. houses of worship, identifying 915 reported incidents in 2025, an 8.8% increase from 2024. Protestant churches accounted for 63% of incidents, followed by Catholic churches (14%), synagogues (12%), and mosques (5%). Theft and vandalism remained common, but casualties increased from 69 in 2024 to 202 in 2025, including 48 deaths and 154 injuries. Assaults accounted for nearly 90% of deaths and more than 86% of injuries.

More than half of reported incidents occurred outside houses of worship, highlighting vulnerabilities in parking lots, walkways, entrances, and surrounding grounds. Threats also varied by faith community, with Jewish and Muslim institutions experiencing more communicated threats, intimidation, and graffiti. Cyber incidents were significantly underreported, despite risks from phishing, compromised credentials, data theft, and extortion.

FB-ISAO recommends conducting site-specific threat assessments, improving perimeter security and lighting, controlling access, training staff and volunteers, coordinating with law enforcement, and strengthening cybersecurity practices. The report emphasizes prioritizing security measures based on the threats most likely to affect each congregation.