Mortgage Companies
Around the Clock Monitoring for Mortgage Companies, Before a Breach Becomes a Notice.
A takeover of one loan officer's mailbox can sit quietly for weeks. Our managed detection and response watches your accounts, devices and cloud around the clock and acts on what it finds.
For mortgage lenders, brokers and servicers that hold borrower files and have no security team of their own.
Managed Security Monitoring (MDR and SOC) for Mortgage Companies
What Does Monitoring Catch in a Mortgage Company?
The early signs of the attacks mortgage companies see: a sign-in to a loan officer's mailbox from somewhere they have never been, a new rule that forwards or hides mail about closings, a laptop running something it should not. A security operations center collects logs and alerts from endpoints, cloud accounts and the network, and analysts investigate and act: disabling an account, isolating a device, stopping a process.
What Does the FTC Safeguards Rule Say About Monitoring?
It asks for controls that monitor and log the activity of authorized users and detect unauthorized access to customer information (16 CFR 314.4(c)(8)), and for regular testing or monitoring of your safeguards. Absent effective continuous monitoring, it requires annual penetration testing and vulnerability assessments at least every six months (16 CFR 314.4(d)(2)).
Our 24/7 monitoring is one way to meet the continuous monitoring part. How it is documented for your firm is part of the compliance scope, delivered by our Compliance Division.
What Happens if Borrower Data Is Exposed?
You hear from us, and the response has already started. The written incident response plan, which the rule asks for (16 CFR 314.4(h)), says who decides what. Our investigation helps establish what was accessed and whether it was encrypted.
That matters because a covered firm must notify the FTC within 30 days of discovering the unauthorized acquisition of unencrypted information on at least 500 consumers (16 CFR 314.4(j)). The decision to notify, and any state notices, are yours and your counsel's; we give you the facts to make it.
Is Monitoring Enough on Its Own?
No, and we do not sell it that way. Monitoring works best on top of multi-factor authentication, endpoint detection and response, patching, backups and trained staff. Managed security is the program that keeps all of those in place.
What Is Included
6 PARTS24/7 SOC Monitoring
Logs and alerts from cloud, network and endpoints watched around the clock.
Managed Detection and Response
Analysts who investigate and act, not just forward an alert.
Threat Detection on Accounts
Suspicious sign-ins and mailbox forwarding rules flagged and acted on.
Incident Response
A formal plan, and a team that runs it with you.
Reporting
What we saw and what we did, in plain language.
Ransomware and Phishing Defense
Detection tuned to the attacks small businesses see most.
How Managed Security Monitoring (MDR and SOC) Works for Every Client
Frequently Asked Questions
4 QUESTIONSIs the monitoring really around the clock?
Yes. The SOC monitoring is 24/7, including nights, weekends and holidays, which matters for a business whose closings cluster at month end.
Does continuous monitoring replace penetration testing under the Safeguards Rule?
The rule requires annual penetration testing and vulnerability assessments at least every six months only absent effective continuous monitoring (16 CFR 314.4(d)(2)). Whether your monitoring meets that bar is part of your compliance scope; confirm it with your counsel.
Will you notify the FTC for us?
No. The notice is the firm's to make. We give you what the investigation found, such as what was accessed and whether it was encrypted, so you and your counsel can decide.
Will you tell us about every alert?
No. Most alerts are investigated and closed by our team. You get a report of what we saw and a call when a decision is yours.
More for Mortgage Companies
Managed IT and Help Desk
Unlimited remote support, monitoring and maintenance at a fixed monthly cost.
Microsoft 365 and Email Security
Microsoft 365 set up, secured and run, with email protection against phishing and spoofing.
Backup and Ransomware Recovery
Encrypted, off-site backups that are tested, and a plan to restore the business after an attack.
Virtual CISO (vCISO)
Senior security leadership, a roadmap and governance, without a full-time hire.
Mortgage Companies
Managed IT and security for mortgage lenders, brokers and servicers, with the FTC Safeguards Rule in view.
Talk Through Your Monitoring.
Pick a time. Tell us where your loan files live and who can reach them.
Looking for CMMC? Our Compliance Division, Capital Cyber Compliance, delivers it.
Under 25 people? Apply for an in-kind cybersecurity grant from Cyber Grants Alliance, a nonprofit. No cost to you.