5.1.23 Recognizing Phishing Attempts
May 1, 2026
...nt attempt to gain access to sensitive information—such as passwords, financial data, or internal systems—by pretending to be a trusted source. These attacks most commonly occur through email, but can also come via text...
5.1.21 Confidentiality Expectations of Email
May 1, 2026
...t be handled accordingly. Do not share sensitive information externally. Church data—including member information, giving records, internal decisions, staff matters, or strategic discussions must not be forwarded outside...
5.1.20 Personal Use of Crosspoint Email
May 1, 2026
...ts both the individual and the organization, ensuring clean transitions, proper data stewardship, and long-term operational efficiency.
...ng Microsoft Authenticator To protect your account and sensitive organizational data, all staff are required to enable Multi-Factor Authentication (MFA). Follow the steps below to set up the Microsoft Authenticator app:...
5.1.18 Multi Factor Authentication (MFA)
May 1, 2026
...ive or financial information—especially banking platforms, payment systems, and databases with personal or donor information—must have MFA enabled. Passwords alone are not sufficient to protect against modern security th...
5.1.17 Personal Password Compromise
May 1, 2026
...d accounts Prevent unauthorized access Minimize potential damage to systems and data Protecting the integrity of our systems is a shared responsibility. Immediate communication is critical to maintaining security a...
5.1.15 Device Return
May 1, 2026
...hould equipment be discarded independently. Devices that contain or may contain data (e.g., hard drives, copiers with scanning/storage capabilities) must be securely wiped by IT prior to disposal or vendor return to ensu...
5.1.14 Password Management
May 1, 2026
...ure, encrypted manner. Security Requirements: Systems involving financial data, member information, or PCI compliance must use passwords with: Minimum of 15 characters Combination of uppercase, lowercase, numbers,...
6.1.5 Risk Management Plan
May 1, 2026
...911 Evacuate building Use extinguisher only if trained and fire is contained 9. Data and Operational Risk Management Preventative Measures Preventative Measures HIPAA-compliant EHR system Secure billing platforms Passwor...
5.1.1 AI Generated Guidelines
Apr 28, 2026
...ve by IT. This includes tools connected to: Church Management Software / Member databases / Giving platforms / Email systems / Internal documents Approval will be requested through IT. 4. Verify AI-Generated Content Staf...
4.5.2 Cash & Check Handling (Weekday)
Apr 28, 2026
Cash & Check Handling (Weekday) Cash and check donations or payments received during the week must be handled securely, consistently, and with clear accountability across all campuses. Storage Requirements Each campu...
4.5.10 PCI Compliance and Credit Card Handling
Apr 28, 2026
...per, email, text message, spreadsheets, or personal notes. Retaining cardholder data creates unnecessary liability for Crosspoint Church and is strictly prohibited. If you want, I can also turn this into a more formal po...
4.3.1 Budgeting Process Overview
Apr 27, 2026
...ect intentional stewardship and mission alignment Planning should be realistic, data-informed, and forward-looking Collaboration between campus leadership and central operations is essential Final budgets must be approve...