INDUSTRIES

Mortgage, financial services and insurance, each written to its own supervisor and rulebook.

Mortgage lenders and servicers, banks and credit unions, insurers: each page is written to what reaches its reader, and says who it does not reach.

Three industries, three rulebooks.

Mortgage, the specialization

A federal security rule that exempts part of its own testing requirement below a consumer count, four counterparty clocks, two AI mandates, state licensing, New York. Specialization here means these are the rulebooks, contracts and program requirements this firm works in most.

Mortgage

Banks and credit unions

Five supervisors by charter, their rules, vendor guidance and clocks, and the board decision the retired FFIEC Cybersecurity Assessment Tool left.

Financial Services

Insurance

A state department on two tracks, financial condition and market conduct; the second carries data and AI questions. Louisiana's law beside the model.

Insurance

Not one of these three? Any organization that has to prove to somebody else that it is in control is in scope. We publish no client names, logos or engagement details, in any industry.

References are provided at proposal stage, under NDA, on request.

The same answers, whatever your supervisor.

Your vendor process needs a documented basis for choosing us: Trust and Assurance. A dated request starts at Examination and Evidence Readiness; one that is not industry shaped, at the Security Assessment. Every clock for all three: the notification clock map, one printable page.

Tell us which of these three you are.

Name your supervisor, counterparties, the request and any date. The reply names your page, the engagement and whether we can meet it.