Threat Level Update
FB-ISAO assesses that the overall threat level for faith-based organizations remains Severe. While no single development currently warrants escalation to a critical or imminent-threat level, the broader environment remains sustained, dynamic, and concerning. Election-related tensions, major faith-community observances, societal polarization, and ongoing cyber and physical security risks continue to support maintaining the current posture.
Faith-based organizations should continue using the FB-ISAO threat level as a strategic indicator – not a substitute for local assessment. Protective measures should be informed by local threat information, known vulnerabilities, potential consequences, and available resources.
What This Means
The current environment is best understood as a sustained increased baseline – a “new normal” of elevated risk that requires continued vigilance, not reduced attention. Houses of worship and related community spaces should maintain visible deterrence, disciplined access control, volunteer and security team readiness, incident reporting, law-enforcement coordination, phishing resistance, identity security, timely patching, and resilient backups.
FB-ISAO will continue to monitor physical, societal, geopolitical, and cyber indicators that may affect faith communities. Updates, bulletins, or alerts may be issued if specific developments, tactics, actors, or localized concerns require attention.
Next Update
FB-ISAO will resume a quarterly update cadence while continuing regular internal assessments. The next published threat-level statement is anticipated in mid-December 2026, unless conditions warrant escalation, downgrade, or other interim communication.
The Cyber Threat Intelligence, Operational Resilience (together, the Threat and Incident Response) working groups continue to actively monitor and share information, reports, and perspective regarding our threat environment.
Regular updates are being shared in the Faith-Based Daily Awareness Post, shared via email and available on our blog.
- The Physical Threat Level remains “SEVERE.” SEVERE means that FB-ISAO is unaware of any planned events, there is concern that an event/incident is highly likely. FB-ISAO will continue to closely monitor events and make appropriate revisions to this threat assessment as needed.
- The Cyber Threat Level remains “ELEVATED.” ELEVATED means that FB-ISAO is unaware of any specific threats, but there is concern that an event is more likely than normal.
The full statement can be read here.
