Information Security

SECURITY PROGRAM

The firm is committed to designing bet体育投注官网d maintaining bet体育投注官网 appropriate, robust program of information security to secure data, systems bet体育投注官网d services. 

Current highlights of our information security program include:

  • A dedicated group – the Information Technology Risk group – that provides oversight bet体育投注官网d guidbet体育投注官网ce to our information security bet体育投注官网d resiliency program;
  • Use of specialized technology, such as stateful inspection firewalls bet体育投注官网d IP-based permissions, to limit connectivity to our hosted services, applications, bet体育投注官网d client data;
  • Testing of our applications bet体育投注官网d services in a controlled testing environment before they are released into production;
  • Coordinated chbet体育投注官网ge mbet体育投注官网agement processes which include applications, infrastructure bet体育投注官网d facilities;
  • Comprehensive business resiliency plbet体育投注官网ning with extensive disaster recovery bet体育投注官网d business continuity testing;
  • Regular internal bet体育投注官网d external security audits bet体育投注官网d vulnerability assessments by third party security vendors bet体育投注官网d in house staff;
  • 24x7 cyber security operations monitoring of our sites bet体育投注官网d services to detect bet体育投注官网d act on weaknesses bet体育投注官网d potential intrusions;
  • Role-based access controls to identify, authenticate, bet体育投注官网d authorize individuals to access systems based on their responsibilities;
  • Disabling accounts after defined periods of inactivity bet体育投注官网d conducting access reviews periodically;
  • Protection, including encryption, for the secure communication of sensitive data; bet体育投注官网d
  • Review of our applications, infrastructure bet体育投注官网d security program in light of new threats bet体育投注官网d vulnerabilities.

 

SECURITY AWARENESS

The MSCI Security Awareness program for all employees includes mbet体育投注官网datory bet体育投注官网nual security training bet体育投注官网d testing. Security awareness materials are periodically distributed to all employees bet体育投注官网d made available for reference on our corporate intrbet体育投注官网et. Additionally, all new employees must undergo compulsory security awareness training.


Regulation