Who at your church can access payroll records?
Think about who can view, edit, or download employee pay information.
Does your payroll system require multi-factor authentication (MFA) to log in?
MFA means a second verification step beyond a password — like a text code or authenticator app.
How does your church store W-2s and other tax documents?
W-2s and housing allowance files contain Social Security numbers and private details - making church payroll compliance and secure document storage a top priority.
When a staff member asks to change their direct deposit, what happens?
Fraudulent direct deposit changes are one of the most common payroll scams targeting churches.
How are payroll system passwords managed?
Shared or rarely changed passwords are a leading cause of unauthorized access.
Has your staff received training on payroll data security?
This includes phishing awareness, data handling procedures, or security policy reviews.
When a staff member leaves, how quickly is their payroll access removed?
Former employees retaining system access is a common — and preventable — vulnerability.
