CapitalStream™, a pioneer in front office automation solutions for commercial and equipment finance operations, today announced it has achieved compliance with a rigorous set of information security risk management criteria, and as a result has been awarded certification by the TruSecure Corporation®, a worldwide leading security intelligence and services provider. TruSecure’s Security Assurance Program is an industry-recognized risk reduction program that addresses all aspects of information security, ranging from network and system vulnerability analysis to physical and policy evaluation. The certification tests are performed regularly, and companies must meet all standards in order to maintain the TruSecure-backed certification.
Under the program, CapitalStream works with TruSecure to regularly assess the company’s overall security posture with regard to its ASP production network. Assessment procedures are carried out pursuant to TruSecure risk assessment and mitigation methodology, which addresses six categories of risk: privacy, electronic threats and vulnerabilities, malicious code, physical security, human factors, and downtime issues.
"CapitalStream’s customer focus is on banks and other financial institutions that have very rigorous requirements for data and network security," said Bob Flinton, TruSecure’s director of product management. "TruSecure certification is a globally recognized validation, providing organizations a complete framework to continuously identify and manage risk. The TruSecure Certification confirms CapitalStream’s commitment to its customers and partners by providing stringent processes to adhere to in order to maintain an environment with the highest levels of security and reliability."
The goal of the TruSecure Security Assurance Program is to verify and implement effective security controls at every point within CapitalStream’s ASP network infrastructure, and then check them on an ongoing basis to ensure they are continuously met. Evaluation procedures under the TruSecure program include repeated external and internal network scanning of the critical devices in CapitalStream’s network; network configuration reviews; onsite inspections of CapitalStream’s physical environment, including susceptibility to theft, and CapitalStream’s perimeter physical defenses, such as gates, locks, surveillance devices and alarms; and reviews of information security policies and procedures. Throughout the testing and analysis, TruSecure concluded that CapitalStream has taken appropriate action to prevent exploitable vulnerabilities.
"Financial data is a critical asset to our customers and they entrust that information to us," said Rick Kusumoto, Manager of ASP Operations at CapitalStream. "The security certification by TruSecure demonstrates CapitalStream’s dedication to ensuring that our ASP and hosting environments provide the highest level of security for our customers' information and meet the security requirements of our customers. And our continuous engagement with TruSecure will help ensure that we can react quickly and proactively with regard to evolving security technologies."
TruSecure is the leading security intelligence and services provider, offering the only fully integrated enterprise risk management services on the market. TruSecure's unique blend of proactive risk reduction with real-time security management, monitoring and response assures continuous security of critical business information assets. TruSecure Certification has become a globally recognized symbol of commitment to effective information security in an interconnected economy. Additionally, TruSecure owns the independently operated ICSA Labs® and Information Security® magazine. Headquartered in Herndon, VA, TruSecure protects more than 700 sites worldwide, with operations in North America, Central America, Europe and Asia Pacific.
Established in 1995, CapitalStream develops financial front office automation solutions that enable banks
and finance companies to transform paper-based, stand-alone operations into integrated, streamlined finance supply chains.
CapitalStream solutions streamline application processing, deal structuring, credit analysis and document generation
to rapidly originate leases, loans, lines and cards. As an established industry leader, CapitalStream has helped many
small business lending, equipment finance and commercial lending operations to improve relationships with customers and partners,
streamline operations, reduce risk and achieve significant revenue growth. For more information, visit CapitalStream's
Web site at
www.capitalstream.com.
Sandra Sick
CapitalStream, Inc.
206-548-1703
sandras@capitalstream.com
