Our Commitment to Cybersecurity
At CW Advisors (CWA), we are committed to protecting our clients and prospective clients’ information and take cybersecurity seriously. We have implemented a comprehensive program to help protect your information against attempted cyber intrusions.
Communications
CWA will never reach out to you via any social media platform – WhatsApp, Viber, Instagram, etc. We most often communicate through electronic mail (email), by telephone or via SMS/text messaging.
Incident Response & Monitoring
Endpoint detection and response (EDR) is deployed for 24/7 monitoring and detection. The Security Operations Center uses Security Information and Event Management (SIEM) to evaluate and escalate threats quickly. Our Incident Response Plan ensures efficient containment, eradication, and recovery. Post-incident reviews provide insights for continuous improvement.
Employee Awareness
Quarterly cybersecurity training helps employees recognize threats, like phishing and social engineering. Regular testing ensures adherence to protocols and readiness for attacks.
Vendor Compliance
All material vendors are evaluated for security standards, with annual re-evaluations for those accessing Personally Identifiable Information (PII).
Comprehensive Security Measures
We follow the Center for Internet Security framework and audit twice a year for compliance. We have adopted best practices, such as multi-factor authentication (MFA), access controls, and encryption. Policies are reviewed annually to ensure compliance and address new threats.
Proactive Risk Management
An inventory of devices, applications, and accounts is regularly audited to prevent unauthorized access. Automated updates, vulnerability scans, and EDR software protect systems from malware.
Data Protection and Recovery
Encrypted backups are securely stored in off-site locations, with quarterly recovery tests. Role-based permissions limit access to sensitive data, reducing risk.