What Trust’s ISO Certification Means for Advisors’ Data Security

Posted by Andrea Collatz on February 19, 2013

You probably don’t spend much time thinking about data security, but it’s vitally important to both you and your investors’ peace of mind. Trust Company of America recently achieved the International Standardized Organization (ISO) 27001-Information Security Management Systems (ISMS). ISO is recognized as an internationally leading, independently verified process for managing and maintaining an information security management system. While data security has always been a top priority at Trust Company of America, the ISO certification lends an even greater level of assurance to our security practices and helps advisors in performing their due diligence.

How did Trust implement this approach?

Trust dedicated a team from across the company to implement the required ISO27001 steps:

  1. Analyze information security requirements and establish a policy and objective for information security.
  2. Implement operating controls to manage information security risks in the context of the overall business risks.
  3. Monitor and review the performance and effectiveness of the ISMS.
  4. Continual improvement based on objective measurement.

How does Trust maintain data security?

Among the steps we’ve taken to ensure the security of client data are:

  • Our facility and equipment is a secure and controlled environment, including the access points outside the facility and throughout the building. 
  • All employees are trained on how to deal with non-public information and follow a clean desk policy. 
  • Trust conducts annual reviews of third-party vendors for financial stability and compliance safety and soundness.   
  • Trust has a business continuity program which includes risk assessments, business impact analysis, continuity plans and various types of scheduled exercises.  

With a standardized, independently verified process in place for managing and continually improving privacy measures, Trust Company of America clients can feel confident that their data is secure.

User login