Written Information Security Program (WISP)

Comprehensive security framework — GLBA, FTC Safeguards Rule, IRS Publication 1075, and state-level compliance

GLBA Compliant

FTC Safeguards Rule

IRS Pub 1075 Aligned

State Compliant

1. Program Overview

True Faith Financial Hub maintains a Written Information Security Program (WISP) designed to protect the confidentiality, integrity, and availability of all Nonpublic Personal Information (NPI) and Federal Tax Information (FTI) handled by the platform. This program satisfies the requirements of the Gramm-Leach-Bliley Act (GLBA), the FTC Safeguards Rule (16 CFR § 314), IRS Publication 1075, and applicable state data protection laws including but not limited to California (CCPA/CPRA), New York (SHIELD Act), Massachusetts (201 CMR 17.00), Texas (TDPSA), and Illinois (PIPA).

Designated Security Coordinator

A qualified Security Coordinator is designated to oversee, implement, and enforce the WISP. The Coordinator reports directly to executive leadership and has authority to enforce security policies across all departments.

Annual Review Cycle

This WISP is reviewed and updated at least annually, or upon significant changes to operations, technology infrastructure, applicable laws, or following any security incident.

WISP Version 1.0 · Last Updated: October 2026

Questions? Contact the Security Coordinator through the platform's internal messaging system.