Partnership

First Presbyterian Church of Dallas Selects ITECS for Cybersecurity

The downtown church pairs cybersecurity improvements with ongoing protection, working alongside its own IT administrator.

By Brian Desmot

Published

4 min read

Dallas, Texas

First Presbyterian Church of Dallas and ITECS logos in an abstract illustration of a coordinated security partnership
A security partnership that supports the church’s own IT administrator. Credit: Original ITECS illustration with the authentic First Presbyterian Church of Dallas logo, used with owner authorization.

First Presbyterian Church of Dallas has selected ITECS to strengthen its cybersecurity and provide ongoing managed security, working alongside the church's own IT administrator, Paul Hernandez. The engagement follows an independent assessment against the CIS Controls, a widely used set of cybersecurity safeguards, and turns its recommendations into an implementation plan.

For the 170-year-old downtown congregation, the arrangement adds security specialists while preserving the knowledge and relationships of its in-house IT administrator. ITECS will carry out the remediation project and remain involved through ongoing protection, support and monthly reporting to church leadership.

A downtown institution with a broad community mission

Founded in 1856, First Presbyterian Church of Dallas is a congregation of the Presbyterian Church (U.S.A.). The church is at 1835 Young Street, Dallas, TX 75201. Its 1913 sanctuary is a Dallas Landmark. The church's ministries include The Stewpot, established in 1975 to serve people experiencing homelessness and poverty, FPC Day School and Encore Park.

Churches and nonprofits often ask small IT teams to support a wide range of activities. Donor and member information, school records and online giving all create responsibilities for protecting access and keeping services available. An outside security partner can add capacity while the organization's own administrator remains involved.

From assessment to a signed plan

The church issued a formal request for proposals and selected ITECS through a competitive process. The agreement and its scope of work were signed on September 14, 2026, with Controller Kenneth Wilson signing for the church.

The CIS Controls provide prioritized safeguards for strengthening cybersecurity. In this engagement, the assessment informed eight areas of work. The project is intended to put improvements into practice and establish ongoing security responsibilities.

Eight coordinated workstreams

  • Cloud email and productivityCloud email and productivity capability

    Cloud email and productivity

    Strengthen protection for the church's cloud-based work environment.

  • Identity and accessIdentity and access capability

    Identity and access

    Improve the administration and protection of directory identities and access.

  • Network refreshNetwork refresh capability

    Network refresh

    Update the network as the first delivery priority.

  • Backup and recoveryBackup and recovery capability

    Backup and recovery

    Strengthen backup and disaster recovery arrangements.

  • Vulnerability baselineVulnerability baseline capability

    Vulnerability baseline

    Establish a baseline to guide vulnerability management.

  • Monitoring and responseMonitoring and response capability

    Monitoring and response

    Develop the monitoring and incident-response workstream.

  • Security governanceSecurity governance capability

    Security governance

    Define the policies and responsibilities that support ongoing security.

  • Staff awarenessStaff awareness capability

    Staff awareness

    Prepare staff to recognize suspicious activity and respond appropriately.

Eight coordinated workstreams in the agreed remediation plan.

The network refresh leads the project, with cloud productivity and backup work progressing in parallel. This sequence coordinates related work without waiting for every project activity to finish before strengthening other areas.

  1. Start first

    Network refresh

    The first delivery priority in the remediation project.

  2. Alongside the first phase

    Cloud productivity and backup

    These workstreams proceed alongside the network refresh.

  3. Continue together

    Managed security partnership

    Continuing protection, allocated support and monthly reporting.

The starting priority, work that runs alongside it, and the continuing engagement.

Working with the church's IT administrator

Paul Hernandez remains the church's technical partner. ITECS adds a dedicated delivery and account team: Marc Dunbar leads delivery, and Jordan Emerle manages the account. Monthly progress reports give church leadership a regular view of the work and ongoing services.

  • In-house IT

    The church's IT administrator

    Paul Hernandez remains involved as the church's technical partner.

  • ITECS

    ITECS delivery and account team

    Remediation delivery, ongoing managed security and account coordination.

  • Working together

    Coordination with church leadership

    A working partnership supported by monthly progress and service reports.

An ongoing partnership between the internal IT team and ITECS.

The model gives the church additional security capacity without replacing its administrator. For other nonprofits with a small internal team, that distinction matters: outside expertise can support the people who already understand the organization.

Ongoing protection and clearly defined support

The ongoing agreement includes 24/7 managed detection and response across the church's devices through our MDR partner, server management, cloud productivity and server backups, and security awareness training with monthly phishing tests. It also includes a quarterly allocation of support hours and monthly reports.

Through our MDR partner

24/7 threat detection and response

Continuous partner MDR coverageManaged detection and response runs around the clock through our MDR partner, seven days a week.

24/7 managed detection and response through our MDR partner.

ITECS support

Quarterly support allocation

A quarterly block of support hours under the agreement; separate from continuous threat detection and response.

Around-the-clock MDR is delivered through our MDR partner. ITECS support follows the agreed quarterly allocation.

Continuous threat detection and response is delivered through the MDR partner. Hands-on support follows the agreed allocation and terms. Together with regular reporting, those defined responsibilities give church leadership an ongoing security relationship beyond the initial project.

About First Presbyterian Church of Dallas

First Presbyterian Church of Dallas is a downtown congregation with a history of worship, education and community service. Learn more about the church and its ministries at fpcdallas.org.

About ITECS

Founded in 2002, ITECS provides managed IT, cybersecurity, cloud hosting and technology consulting. Its cybersecurity consulting and remediation services help organizations turn assessment priorities into coordinated action and ongoing security management.

About this story

Explore related services and resources

Editorial note

Company announcement prepared with AI assistance using ITECS-supplied engagement information and public sources.