Keeping Cybersecurity Top of Mind – A Roadmap of Bartlett’s Approach

In March, Bartlett hosted a cybersecurity webinar on “Staying Safe in the Age of Artificial Intelligence.” Whether you were able to attend the webinar live or watch the recording afterwards, the topic of cybersecurity is constantly evolving. At Bartlett, we remain proactive in our cybersecurity practices to keep your information safe. Read on to learn more about Bartlett’s approach to keeping you and your information safe in the modern-day cybersecurity landscape.
Overview
Bartlett Wealth Management’s comprehensive cybersecurity strategy combines advanced technological solutions, rigorous operational procedures, and a strong emphasis on user responsibility. Our strategy is designed to protect sensitive data and infrastructure from a wide range of cyber threats through proactive threat management, robust data protection, and a culture of security awareness.
1. Advanced Threat Detection and Response
- 24/7 managed detection and response services.
- AI-powered anomaly detection and threat identification.
- Real-time monitoring of network and endpoint activity.
- Proactive threat hunting and incident response capabilities
2. Data Security and Governance
- Data loss prevention (DLP) and information protection solutions.
- Data access governance and auditing tools.
- Secure file sharing and collaboration platforms.
- Data encryption at rest for storage systems.
- Insider risk management and monitoring.
- eDiscovery capabilities for legal and regulatory compliance.
3. Infrastructure and Endpoint Security
- Comprehensive endpoint protection (antivirus, anti-malware, EDR).
- Network firewall and intrusion prevention systems.
- Cloud workload and data security solutions.
- Data backup and recovery systems.
- Disaster recovery and business continuity platforms.
- Regular software and security patching.
4. Physical and Operational Security
- Secure printing protocols and procedures.
- Secure document destruction.
- Physical access control with key card systems.
- Regular software and security patching processes.
5. Vendor Risk Management
- Mandatory vendor due diligence documentation.
- Comprehensive compliance questionnaires for third parties.
- Requirement for independent security control reports (e.g., SOC reports).
6. User Awareness and Training
- Regular cybersecurity awareness training sessions for employees.
- Phishing simulation exercises to test and improve user security awareness.
- Accountability Measures: Users are held accountable for failure to complete mandatory training sessions. Users who fail phishing simulations are required to participate in a one-on-one discussion with the Chief Information Security Officer (CISO) to address security knowledge gaps and reinforce best practices.
7. Security Monitoring and Log Analysis
- Weekly Security Log Reviews: Regular analysis of security logs, including account lockouts and access to secure areas, to detect suspicious activity and potential security incidents.
8. Vulnerability Management and Penetration Testing
- Quarterly Vulnerability Assessments: Regular scans of systems and applications to identify known security weaknesses.
- Annual Penetration Testing and Remediation: Comprehensive simulated attacks conducted by independent security experts to identify and exploit vulnerabilities.
Summary
Bartlett Wealth Management employs a multi-layered security strategy that combines advanced technology, robust processes, and a strong emphasis on human factors. This approach aims to protect against a wide range of cyber threats, including advanced persistent threats, insider attacks, and data breaches.
Key elements include:
- Proactive threat management
- Data-centric security
- Infrastructure resilience
- Strong vendor oversight
- A security-conscious culture with enforced accountability.
This comprehensive approach demonstrates our firm’s commitment to safeguarding organizational assets and maintaining a strong security posture.
DISCLOSURE
This material provided by Bartlett Wealth Management (“Bartlett”) is for informational purposes only and is not intended to serve as a substitute for personalized investment advice or as a recommendation or solicitation of any particular security, strategy, or investment product. Nothing in these materials is intended to serve as personalized tax and/or investment advice since the availability and effectiveness of any strategy is dependent upon your individual facts and circumstances. Past performance is not a guarantee of future results. Opinions expressed by Bartlett are based on economic or market conditions at the time this material was written; actual economic or market events may turn out differently than anticipated. Facts presented have been obtained from sources believed to be reliable. Bartlett, however, cannot guarantee the accuracy or completeness of such information, and certain information presented here may have been condensed or summarized from its original source. Any reference to an index is included for illustrative purposes only. Indices are unmanaged vehicles that serve as market indicators and do not account for the deduction of management fees and/or transaction costs generally associated with investable products