These updates are shared to help raise the situational awareness of Faith-Based organizations to best defend against and mitigate the impacts from all-hazards threats including physical security, cybersecurity, and natural disasters.
This article in Church Executive discusses how sexual abuse is one of the most significant risks facing church camp environments, particularly because these settings often rely on trust, volunteer labor, and informal structures. Experts highlight that individuals who intend harm may exploit this trust and use grooming behaviors to gain access not only to children but also to other adults in the organization. A major concern is that many church camps either lack comprehensive child protection policies or fail to consistently implement and update them. Effective prevention requires structured screening processes, including background checks, interviews, reference verification, and ongoing monitoring, rather than relying on background checks alone. The article also underscores the importance of consistent procedures such as secure check-in/check-out systems, controlled access to children’s areas, and staff training on recognizing concerning behaviors and responding to incidents. Overall, the article stresses that safeguarding children requires intentional systems, continuous training, and organizational accountability, not assumptions of safety.
Analyst Comments: From an organizational perspective, camps and houses of worship (HOWs) should treat child safety as a formal risk management function. This means implementing layered safeguards that combine policy, training, and operational controls. First, organizations should adopt comprehensive, written child protection programs that are actively enforced, regularly updated, and consistently applied across all programs, including camps, retreats, and partner activities. Screening should be role-based and ongoing, recognizing that background checks alone are insufficient; structured interviews, reference checks, and behavioral-based screening are critical to identifying risk indicators.
Equally important is training staff and volunteers to recognize grooming behaviors and boundary violations, as well as ensuring they understand reporting obligations and escalation procedures. Camps should consider enforcing clear operational safeguards such as two-adult supervision policies, restricted access to child areas, and standardized check-in/check-out protocols that account for high-stress scenarios. Organizations should also consider conducting regular audits, scenario-based exercises, and compliance checks to ensure policies are not only in place but functioning as intended. Finally, leadership should consider prioritizing a culture of accountability where concerns are taken seriously, documented, and acted upon promptly. In practice, effective protection comes from consistent execution of systems, not the existence of policies alone.
The Strava article highlights growing concerns around how fitness tracking apps can unintentionally expose sensitive location data, using military personnel as a key example. Publicly shared workout routes, profiles, and activity logs have revealed patterns of movement, locations of bases, and even individual identities. These exposures often occur not through sophisticated cyberattacks, but through routine use of apps that automatically collect and share geolocation data. Even when users believe they have enabled privacy protections, researchers have found that metadata and aggregated data can still be analyzed to identify personal routines, home locations, and frequently visited sites. The issue underscores how everyday technologies, when combined with publicly accessible data, can create unintended security risks by revealing patterns of life and operational details to anyone monitoring the platforms.
Analyst Comments: While not the military, religious leaders and staff using fitness apps like Strava may unintentionally expose sensitive information such as facility layouts, schedules, and personal routines through publicly shared activity data.
Organizations should consider addressing this risk by incorporating guidance on personal technology use into security policies, encouraging private settings, and limiting location sharing. Regular awareness efforts and periodic reviews of publicly available data can help identify and reduce this often-overlooked vulnerability.
The FB-ISAO’s sponsor Gate 15 publishes a daily newsletter called the SUN. Curated from their open source intelligence collection process, the SUN informs leaders and analysts with the critical news of the day and provides a holistic look at the current global, all-hazards threat environment. Ahead of the daily news cycle, the SUN allows current situational awareness into the topics that will impact your organization.