Security

We have a Written Information Security Program (WISP) aligned to industry standards and continuously evaluate ways to improve our security posture. Our WISP as well as other policies and procedures are shared with all employees.

Each employee has a unique, individual login.

Access to client data is limited to authorized individuals who require it for their job.

We enforce password complexity standards, leverage Multi-Factor Authentication where possible and employ a host of other best practices related to password management.

Our internal network uses defense-in-depth measures and applies zero-trust principles through secure gateways.

All employees receive security awareness training upon hire, with ongoing training throughout the year.

Semiannual cybersecurity assessments conducted by a vetted, independent third-party expert.

If you believe you have discovered a vulnerability within TrueHaven Capital, please submit a report to us by emailing mwakefield@truehaven.net.