CYBERSECURITY AT LEGACY FINANCIAL

Virtual Chief Information Security Officer (CISO)

Legacy Financial partners with a service provider, Riskigy, for fractional Virtual CISO services and cybersecurity expertise. Riskigy delivers ongoing cybersecurity oversight and continuous advisory support. 

Trust & Security Overview

Legacy Financial Independent Advisors is committed to maintaining the highest standards of trust and security. As an SEC Registered Investment Advisor, we understand the importance of protecting our clients' sensitive information. Our comprehensive security framework is designed to protect client data, ensure compliance with regulatory requirements, and maintain a secure environment for your investments.

Staff Cybersecurity Training

Legacy Financial provides its employees with regular cybersecurity and technology risk awareness training. We employ targeted simulations to test our response to phishing attacks and pair them with training exercises. Phishing simulations and training are tailored to the latest threats in the news. 

Vendor Risk Management

Legacy Financial conducts initial and ongoing due diligence and retains documentation of vendors with access to sensitive data and critical services. We continuously monitor vendor performance and security practices to ensure they meet our standards.

Information Security Committee

Legacy Financial has established an information security committee to make informed decisions on its information security program. The InfoSec Committee meets monthly. 

Encryption

When transmitting data, all files containing private client data will be sent using encryption or by means of another secure delivery process. When storing sensitive data, all files containing the personal information of clients will be stored using encryption on the disk they are stored, or using a password-protected machine to ensure access only by authorized individuals.

Passwords

Employees are prohibited from sharing account credentials with any other person. Passwords must be kept private. Account credentials of systems used by employees are reviewed at least annually and updated as needed to ensure access to Legacy Financial’s systems is appropriate. 

Updating Systems

Legacy Financial will review, at least quarterly, the status of both hardware and software applications, including anti-virus programs and firewalls, to ensure that all available security updates are installed. 

Risk Assessments

An independent annual assessment of Legacy Financial's policies and procedures is performed to enhance cybersecurity posture, identify areas for improvement, and provide actionable next steps.

Data Backup

Legacy Financial conducts regular backups and restoration testing. Our service provider provides us with immutable backup storage. 

Secure destruction 

Any personal information will be securely destroyed to ensure that the personal information cannot be accessed by subsequent persons in possession of the disk or resource being destroyed by Legacy Financial. 

Cybersecurity Policy

Legacy Financial has adopted a formal cybersecurity policy to provide guidance to Legacy Financial employees, contractors, and those subject to Legacy Financial’s compliance program for the storage or transmission of confidential digital information.