ECIW Written Information
Security Program (WISP)
ECIW — administrative, technical, and physical safeguards for the protection of Nonpublic Personal Information.
Purpose
This Written Information Security Program (WISP) describes how ECIW Systems protects Nonpublic Personal Information (NPI) in compliance with the Gramm-Leach-Bliley Act (GLBA) Safeguards Rule.
Scope
This program applies to all electronic and physical information collected through the ECIW platform.
Information Security Program Coordinator
ECIW Systems, the operator of the ECIW platform (based in Philadelphia, Pennsylvania, USA), is designated as the Information Security Program Coordinator and is responsible for implementing and maintaining this program.
Risk Assessment
We conduct periodic risk assessments to identify reasonably foreseeable threats to customer information, including unauthorized access, use, or disclosure.
Security Safeguards
ECIW Systems maintains a layered set of safeguards designed to protect customer information:
- Administrative: Role-based access controls, background-checked personnel, mandatory security training.
- Technical: Encryption in transit (TLS 1.3) and at rest, secure authentication, automatic session timeouts, input validation, and logging of access to sensitive data.
- Physical: All data is hosted on secure Cloudflare infrastructure with industry-standard physical controls.
Employee Training
All personnel receive security awareness training upon hire and annually thereafter.
Vendor Management
Third-party service providers are contractually required to maintain appropriate safeguards and are reviewed periodically.
Incident Response Plan
In the event of a data breach, we will investigate, contain, notify affected parties and regulators as required by law, and document all steps taken.
Program Review & Updates
This WISP is reviewed and updated at least annually or whenever material changes occur to our business or technology.
ECIW is committed to protecting the confidentiality and security of the information you entrust to us.