General Privacy and Security Information

Orion Advisor Solutions, Inc. and its affiliated entities (Orion), take your privacy and security, and the privacy and security of your clients, very seriously and strive to stay in front of cybersecurity. Below is information on Orion’s current practices and policies.

Privacy

 

Security

We adhere to the following security frameworks and standards:

  • NIST
  • ISO 27001
  • SOC 1 & 2
Soc 2 Type 2 Badge

Identification & Assessment of Risks

  • Asset Inventory
  • Business Impact Analysis
  • Defined Security Roles
  • Monitoring of Regulatory Requirements
  • Internal/External Vulnerability Scans
  • Documented Risk & Management Process
  • Impact Likelihood

Access Controls

  • Multi-Factor Authentication
  • Need-to-Know Access
  • New Hire/User Access Forms
  • Changes to Access Require Authorization
  • Internal Audit Review
  • Controlled Remote Access

Protection of Network and Info

  • Access Control
  • Awareness & Training
  • Data Security Policies & Procedures
  • Intrusion Detection Software
  • Backup Procedures/Data Replication
  • Routine Testing/Scans
  • Encryption

Response & Recovery

  • Incident Response Policy
  • Communication Plan
  • Forensic Analysis of Events
  • Routinely Updated Policies & Procedures
  • Mitigation Activities to Prevent Expansion
  • Plans include External Support from Law Enforcement
  • Cybersecurity Insurance Policy

Oversight of Vendors & Third Parties

  • Separate “Guest” Network
  • No WAN Connections
  • Visitor Policy
  • Internal/External Vulnerability Scans
  • Third-Party Policy Includes Cybersecurity Responsibilities
  • Routine Testing/Scans
  • Controlled Access

Detection

  • Incident Response Policy
  • Event Correlation Software
  • Defined Security Thresholds
  • Continuous Monitoring
  • Anti-virus/Malware Programs
  • Intrusion Detection and Prevention
  • Internal/External Vulnerability Scans

Certifications

Orion and Its Subsidiaries Have Adopted an Information Security Management System (ISMS) and is ISO/IEC 27001 Certified.

This certification is the highest security standard in the technology industry and verifies that we possess the required internal controls to operate, monitor and maintain an ISMS that:

  • Meet both US and international guidelines
  • Has been and continues to be reviewed and approved by accredited ISO auditors
View Certificate
Information Security Management Systems ISO 27001 Certified Seal

We are ISO 27001 Certified

Still have Questions?

Get in touch today by emailing us at privacy@orion.com