Security FAQ
Companywide commitment to privacy and security
College Pro Security FAQ
We take pride in the strength of our security and privacy programs and seek to ensure our clients, employees and investors are aware of our efforts. Below are some common questions and answers about how we approach managing the unique risks associated with information security and how we communicate these.
How often does senior leadership brief the board on information security matters?
The Board of Directors receives a comprehensive security status briefing from senior leadership at least annually with special topic updates as requested or needed.
Has College Pro entered into an information security risk insurance policy?
College Pro carries dedicated cyber risk insurance.
Does College Pro have an information security training program?
College Pro conducts annual mandatory security training as part of its Ascent program, augmented by dynamic training through an industry leading security training platform. This platform augments this training by providing additional real-time feedback through tailored phishing simulation.
Does the company disclose an approach on identifying and mitigating information security risks?
College Pro carries out an annual enterprise risk assessment which includes cybersecurity. In addition, College Pro employs an industry leading cybersecurity firm to conduct regular penetration testing and assessments of security practices. College Pro also runs a third party risk management program to identify and mitigate third party cyber risks.
