This website or its third-party tools use cookies, which are necessary to its functioning and required to achieve the purposes illustrated in the cookie policy. If you want to know more or withdraw your consent to all or some of the cookies, please refer to the cookie policy. By closing this banner, scrolling this page, clicking a link or continuing to browse otherwise, you agree to the use of cookies.
Close

Cybersecurity


Cybersecurity and data privacy are of paramount concern in today’s financial services environment. Meeting compliance requirements for data security outlined in the Gramm-Leach-Bliley Act and state level requirements such as NY DFS Cybersecurity Regulation (23 NYCRR Part 500) are providing structure to our procedure. As a demonstration of a comprehensive cybersecurity program Luxury Mortgage Corp. is recommending that our vendor network complete an independent third-party cybersecurity assessment. If that is not available, at a minimum, demonstrate that they have the following cybersecurity controls in place or have a roadmap developed to deploy each specific control by a specified date:

  • Modern operating systems and software; examples include systems running at lease Windows 7 Professional. Windows 10 Professional preferred (today)
  • Anti-virus / Anti-Malware software on all endpoint devices (today)
  • Professional grade email with a registered domain; for example no generic @comcast.net or @gmail.com addresses (today)
  • Comprehensive patch management for all devices; this includes all operating system patches and 3rd party software (today)
  • Multi-factor Authentication for all remote access including webmail (September 2018)
  • The ability to secure email using encryption to protect sensitive data transactions (September 2018)
  • Whole disk encryption on all technology assets storing consumer data; such as Microsoft Windows Bit locker (September 2018)
  • Firewalls in place between devices and the public Internet (December 2018)
  • Mobile Device Management for all smartphones and tablets that are used to communicate with or store consumer data (December 2018)

Luxury Mortgage Corp. is committed to working together with our vendors to reduce the ever-growing threat posed to customers and to financial systems by cyber criminals. Our goal is to be able to identify and mitigate internal and external cybersecurity risks that may threaten the security or integrity of our customer’s nonpublic information stored on your information systems.