A church that opens its doors to the public takes on a legal duty of reasonable care toward everyone who walks in, and the legal duties and policies behind church security are how a congregation meets that duty without creating new liability of its own. In practical terms that means screening and training the people you deploy, writing a use-of-force policy before anyone starts patrolling, following your state’s rules on firearms and guard licensing, documenting a written assessment, and confirming with your insurer that the program you plan to run is actually covered. Skip any of those steps and the exposure shifts from the person who caused harm to the church itself.
The Duty of Care Churches Owe Attendees
Under premises liability law, a property owner who invites the public in owes those visitors a duty of reasonable care. Courts classify churchgoers as invitees because the church actively encourages their presence, and that classification carries the highest standard of care a property owner can owe. The church must take reasonable steps to protect against both environmental hazards and foreseeable criminal acts.
Foreseeability is the concept that drives most claims. A church doesn’t have to predict every possible threat, but it does have to respond to warning signs a reasonable organization would recognize: a pattern of similar crimes in the surrounding area, publicized threats or hate crimes against faith communities, and prior incidents at the same location. Once a court determines a risk was foreseeable, a failure to take preventive steps can constitute negligence. Most liability claims arise not from the criminal act itself but from the argument that the church saw warning signs and did nothing.
Churches are also responsible for what their security team members do, whether those people are paid staff or volunteers. Skip a background check and let someone with a violent criminal history injure a member, and a court is likely to find the church negligent for failing to screen. The same logic applies to training. A volunteer who uses excessive force during a confrontation can expose the whole organization if the church never wrote a use-of-force policy or provided instruction.
State Rules on Concealed Carry Inside a Church
State law on carrying firearms in a house of worship varies enormously, and getting it wrong can turn a well-intentioned volunteer into a criminal defendant. A handful of states treat houses of worship as presumptively off-limits for concealed carry unless the church’s leadership explicitly authorizes it. Others ban carry outright in religious buildings. The majority of states treat churches like any other private property, letting the church itself decide whether firearms are allowed on its premises.
Any congregation considering armed security must research its own state’s law before putting a firearm in anyone’s hands. In states that require the church to affirmatively opt in, authorization should come through a formal vote of the governing board, recorded in meeting minutes, and communicated in writing to every armed team member. Verbal permission is not enough when a prosecutor is reviewing the situation after an incident.
Self-defense law then shapes what an armed team member can legally do during a violent encounter. At least 31 states have adopted stand-your-ground principles, which remove the duty to retreat before using force if the person is somewhere they have a legal right to be. In the remaining states, a duty to retreat may apply even inside a church, and the analysis turns on whether the person could have safely withdrawn before resorting to force. Your policies need to reflect whichever standard applies where you are.
Licensing, Background Checks, and Training for Security Personnel
The line between a volunteer safety team and a professional security guard carries significant legal weight. In most states, anyone who receives compensation for security duties falls under the jurisdiction of the state’s private security licensing bureau and must hold a valid guard license. Volunteers face fewer regulatory requirements, but they aren’t always exempt: some states prohibit unlicensed individuals from performing duties that legally constitute professional security work, regardless of whether money changes hands.
Licensed personnel go through background checks using the FBI’s fingerprint-based identification system, which screens for disqualifying criminal history including felony convictions and certain misdemeanor offenses.1Federal Bureau of Investigation. Privacy Impact Assessment Integrated Automated Fingerprint Identification System (IAFIS)/Next Generation Identification (NGI) Biometric Interoperability
Training Hours by State
Training mandates vary widely. For unarmed guards, required initial training ranges from as few as four hours to as many as 48 hours, with a national median around 16 hours. Armed guards face steeper requirements, ranging from four hours to 96 hours depending on the state, with a median of approximately 38 hours. Armed certifications are state-specific: Connecticut requires a “Blue Card” endorsement, New Jersey operates under its Security Officer Registration Act, and other states run their own programs. Armed personnel in virtually every state must complete an annual firearms qualification on a range. When a certification lapses, the person can no longer legally carry while performing security functions.
Standards for Volunteer Safety Teams
Even for unpaid volunteers, the church should require a criminal background check, a minimum number of training hours in de-escalation and emergency response, and a written acknowledgment of the church’s use-of-force policy. This is less about regulatory compliance and more about liability defense. If an incident occurs and the church cannot show it screened and trained its people, the negligent-hiring argument becomes very hard to answer.
Writing a Use-of-Force Policy
Every church security program needs a written use-of-force policy before anyone starts patrolling. The policy should state plainly that force is limited to the minimum amount necessary to stop a threat, and it should describe escalating levels of response so team members have a framework for decisions under pressure.
A standard use-of-force continuum moves through five levels:
- Presence, where a visible team member alone may deter a problem.
- Verbal commands, meaning direct, calm instructions to stop a behavior or leave the property.
- Control and restraint, using physical techniques to guide or hold someone resisting verbal direction.
- Temporary incapacitation, such as pepper spray where legally permitted.
- Deadly force, justified only when someone faces an imminent threat of death or serious bodily harm.
The policy should require that 911 be contacted whenever force is used or is likely to be used. If any physical force above verbal commands occurs, the team must assess whether the individual needs medical attention and provide first aid if so. A written incident report should be completed the same day, while details are fresh. Those reports become critical evidence if the church is later sued or if the person who was restrained files a complaint.
Removing Disruptive Individuals from the Property
Opening the doors for worship does not surrender control of the property. Courts have consistently held that inviting the public in does not convert a private building into a public forum. The church keeps the right to set behavioral standards and to revoke any individual’s permission to remain.
When the church tells someone to leave and that person refuses, the situation shifts from a behavioral issue to criminal trespass, and law enforcement can be involved. The sequence matters. A leader or team member should clearly communicate that the individual is no longer welcome, give a reasonable opportunity to comply, then call police if the person refuses. Even quick notes written after the fact protect the church if the individual later claims they were removed without justification. Posting codes of conduct near entrances or including behavioral expectations in bulletins isn’t strictly required for the legal authority to hold, but it strengthens the church’s position and reduces the chance of confrontation.
Documenting a Security Assessment
A written assessment is the foundation of a credible program and a prerequisite for federal grant funding. The most widely used tool for houses of worship is CISA’s Houses of Worship Security Self-Assessment, which walks church personnel through a structured evaluation of physical vulnerabilities and identifies mitigation options.2Cybersecurity and Infrastructure Security Agency. Paper-Based Houses of Worship Security Self-Assessment and User Guide CISA provides both a web-based version and a downloadable paper form, along with a step-by-step user guide, and churches can contact their local CISA regional office to request an in-person consultation.3Cybersecurity and Infrastructure Security Agency. Faith-Based Community
The assessment should catalog every entry and exit point, including service doors, basement access, and ground-level windows. Floor plans need to identify bottlenecks where crowds could pile up during evacuation. Each room should have its occupancy limit recorded, as determined by the local fire marshal, since those limits drive the required width of exit paths. Every exterior door’s locking hardware should be documented by type: deadbolt, mortise lock, panic bar, or electronic access control. Exterior lighting should be mapped with attention to blind spots. Existing alarms and cameras should be tested, functional status recorded, and any coverage gaps noted. An emergency contact hierarchy with 24-hour numbers for senior leadership, facility managers, and local dispatch rounds out the document. The completed assessment becomes the evidentiary basis for grant applications, insurance negotiations, and budget requests.
Federal Grant Funding for Physical Security
FEMA’s Nonprofit Security Grant Program (NSGP) provides direct funding for physical security improvements at nonprofit organizations at high risk of terrorist attack, and houses of worship are explicitly eligible. For FY 2025, Congress appropriated $274.5 million, split evenly between urban-area and statewide funding streams.4FEMA.gov. Nonprofit Security Grant Program
Individual sites can receive up to $200,000. Organizations with multiple locations can apply for up to $200,000 per site across as many as three sites per funding stream, for a potential maximum of $600,000 per organization per state. Allowable costs include equipment on FEMA’s Authorized Equipment List (21 categories of security hardware), contract security services, active shooter and security training, security risk management planning, and response exercises.5FEMA.gov. FY 2025 Nonprofit Security Grant Program Frequently Asked Questions Equipment purchases must come from that list, which categorizes approved items but does not endorse specific products.6FEMA.gov. Authorized Equipment List Applications route through the state administrative agency that manages homeland security grants, not directly to FEMA, so contact your state’s office of homeland security for local timelines and requirements. A completed CISA self-assessment strengthens the application by showing the church has systematically identified vulnerabilities rather than requesting funding for wish-list items.
Confirming Your Insurance Actually Covers the Program
A standard general liability policy may not cover incidents involving armed security, active shooter events, or the specific liabilities that come with running a formal security program. Churches should review existing coverage with their carrier before deploying a security team and get the answer in writing, not as a verbal assurance from an agent.
Active shooter and workplace violence endorsements are now available from specialty carriers. These policies can include coverage for third-party injuries, victim death benefits, medical and counseling expenses, legal defense costs if the church faces duty-of-care lawsuits, and crisis management consulting. Some carriers offer primary liability limits up to $30 million, with victim death benefits of up to $250,000 per individual. Carriers that offer this coverage typically require specific security measures already in place, or they may require enhancements as a condition of issuing the policy. A completed security assessment and a written security plan are usually prerequisites, and some insurers offer premium reductions for churches that document ongoing training, regular drills, and compliance with the carrier’s risk management recommendations.
Separate Screening for Anyone Working With Children
Security planning must account for the vulnerability of children and youth programs. Many denominations have adopted formal child protection policies that require criminal background checks for every adult volunteer or staff member who works with minors. Those checks should include a national criminal records search at minimum, and results should disqualify anyone with convictions involving violence, abuse, exploitation, or threats against children or vulnerable adults. Most denominational standards call for re-screening every three to four years, though some organizations require it more often. Screening documentation should be kept in secure files with restricted access.
Security team members who may interact with children need both the standard security screening and the child-protection screening. Churches that run FBI fingerprint checks for licensed security personnel should not assume those satisfy the separate child-protection requirements, which may include sex offender registry searches and state-specific abuse registry checks that a standard criminal background check would miss.
When Local Zoning Blocks Security Improvements
If a local government tries to use zoning rules to stop security improvements that comparable nonreligious properties are allowed to make, the Religious Land Use and Institutionalized Persons Act (RLUIPA) applies. No government can impose a land use regulation that places a substantial burden on religious exercise unless the regulation serves a compelling government interest and uses the least restrictive means available.7Office of the Law Revision Counsel. 42 U.S. Code 2000cc – Protection of Land Use as Religious Exercise RLUIPA also contains an equal-terms provision: if the jurisdiction lets a secular assembly hall or community center install fencing, surveillance cameras, or vehicle barriers, it cannot deny the same modifications to a church. The statute separately prohibits discrimination based on religious denomination.8United States Department of Justice. Religious Land Use and Institutionalized Persons Act These protections matter most for physical hardening: bollards at entrances, reinforced doors, perimeter fencing. If zoning officials object, RLUIPA gives the church strong legal footing to push back, provided the improvements are comparable to what nonreligious institutions in the area are allowed to have.