Security Policy for McBride Financial Services

Security Policy for Mcbride Financial Services

McBride Financial Security Policy

Abstract

The Mc Bride Financial Services provides loans to people for mortgages, credit reports, home inspections and appraisals. In order for an individual to apply for a loan, the McBride Financial Services has an available loan application for them to fill out over the internet. The security of allowing the loans to be filled out over the internet is of vital importance. An identity thief could use the victim's personal information to obtain credit elsewhere thus causing the potential to ruin the person's credit.

Another aspect of the securing the information, is to block hacking for ransom attempts. Hackers could have the potential to use the information given within the loan application to threaten release unless a monetary ransom is paid. Further, a need for security in this area is to protect McBride Financial Services from outside hazards. Outside hazards have the potential to bring down the McBride Financial Services internal network with a Denial of Service attack. If this were to happen, the business may loose customers due to the inability to access their information or possibly even view the web page itself.

This document is to describe the Information Security requirements of Online Application Services and Application Service Providers that engage in business with McBride Financial Services. This policy applies to any use of Online Loan Applications (OLA) and any outsourcing to Application Service Providers (ASP) by McBride Financial Services, independent of where hosted.

Policy

The Online Loan Application or Application Service Provider's Sponsor must first establish that its project is an appropriate one for the OLA/ASP model, prior to engaging in any additional infrastructure teams within McBride Financial Services or any external Application Service Providers. The department wanting to use an Online Loan Application or any Application Service Providers service must confirm that the Application...