Information Security of Fi360 Applications
Where applicable, Fi360 uses 256-bit encryption for access to its web-based applications. That ensures the highest level of encryption available in today’s banking market. The latest available virus scanning and malware protection technologies are also used at every layer within the application set. In addition, Fi360 does not store sensitive personally identifiable information (PII) within any of its applications. Non-sensitive PII, such as client address and phone number, is stored in certain applications, where needed. To receive a copy of our Vendor Due Diligence response, including our Information Security Standard Information Gathering (SIG) questionnaire, please contact your sales representative or customer support.
Business Continuity & Disaster Recovery (DR)
An established Business Resiliency program is in place and it is updated, reviewed and approved by management annually. Business Continuity Planning represents a cyclical, process-oriented approach that includes a Business Impact Analysis (BIA), a risk assessment, DR planning and testing. All file systems and databases are backed up daily and can be restored within a four-hour window in the case of a disaster.
Data Center Security
Fi360’s applications are hosted at SSAE 16 certified locations. Copies of the reports are available upon request. No Fi360 client data is stored outside of the continental United States.
Patch Management (Hardware & Software)
Fi360’s hardware and software infrastructure is updated regularly with the latest vendor-provided security patches. Security reviews are also convened to review and implement patches as described by United States Computer Emergency Readiness Team (US-CERT).
Security Policy Training
Broadridge makes available Information Security Awareness training materials for all Broadridge associates. All Broadridge associates are required to complete mandatory Information Security Awareness training at least annually.
Mobile Security Policy
Fi360 does not allow personal mobile devices to connect to the Broadridge networks.
