When it comes to IT and cybersecurity for financial institutions, Agio is among the top managed service providers. They are cognizant of the fact that an investment strategy, a portfolio repertoire and vendor relationships all affect how a company’s IT should be managed and as such provide one of the best services for protecting online data.
Agio’s founder and CEO, Bart McDonough, aware of the increasing threats to cybersecurity and the importance of established protection guidelines, has been advocating for better measures across all industries, not just the financial and investment sectors.
List of Due Diligence Questions
Due diligence questionnaires, also known as a DDQ: – that are at the heart of cybersecurity – have been upheld by the Alternative Investment Management Association (AIMA) that has used them as a way to provide guidance and standardization for all of its members around the world for more than two decades.
At the top of a cybersecurity investment due diligence checklist are more specific due diligence questions. The following is a list of some examples:
- Governance Information
- Are there data inventories?
- How is data storage managed?
- Who takes ownership?
- Data Privacy
- How is sensitive information used?
- Who has access to information and how?
- Risk Assessment
- Is risk assessed through a structured process?
- Is risk assessed at regular intervals?
- Strategy & Program Design
- Are there documented policies and procedures?
- Is there are formalized governance process?
- Information Security
- Are there processes in place to protect, detect, respond, and remediate threats?
- Cyber Threat Intelligence
- Is there an established process to proactively understand and manage the threat environment?
- Incident Response
- Is there are documented plan in place that addresses incident response?
- Is there an adequate and tested disaster recovery process?
- Cyber Insurance
- Are the policies structured to effectively mitigate all aspects of risks associated with cyber-attacks?
- Industry Questions
- Is there a process in place to understand the valuable assets and associated threats of that specific industry?
- Business Questions
- Is there an established procedure and plan that involves all business units in security?
- Cultural Questions
- Is there an awareness of the importance of security?
- Are all insiders aware of their role in maintaining that security?
- Financial Questions
- How is the security program financed?
- Is there a procedure that ensures the maximization of investment benefits?
Cybersecurity diligence has become one of the top priorities for an investment manager. This is because of the rising significance of cybersecurity, which is important as it enables several actions, such as:
- Protecting confidential and proprietary information
- Mitigating operational and investment risk
- Mitigating the risk of misappropriation of funds
- Protecting against reputational damage
- Ensuring compliance with fiduciary duties and regulatory requirements