Orbit 360 Series LLC

Security

ORBIT360 ensures the physical and digital security of its markets, technology, and data through industry-leading security technology and processes. ORBIT360’s Information Security Department consists of diverse and skilled teams that work to protect confidential data from unauthorized access, misuse, disclosure, destruction, modification or disruption.
ORBIT360 maintains detailed information security policies. Employees are required to complete security awareness training upon hire and annually thereafter. The security awareness training modules require employees to read and provide acknowledgement of the Corporate Information Security Policy. The policies are for official use only and are reviewed at least quarterly by ORBIT360 Senior Management.
ORBIT360 employs a dedicated Application Security team which defines and enforces mandatory best-practice secure software development. The Application Security team maintains a policy which details these practices and works closely with ORBIT360 Development teams.
ORBIT360 Operations maintains an Incident Management program to handle any incident with operational impact — security or otherwise. It is ORBIT360’s policy to notify customers of any confirmed material breaches of customer data.
Geographically diverse “like-for-like” Disaster Recovery data centres are maintained and governed by an enterprise-wide policy. Per policy, all ORBIT360 core procedures, systems and operational tasks are: duplicable in recovery facilities, exercised at least annually, documented in comprehensive Disaster Recovery, Business Continuity, and Incident Response Plans, and ensure infrastructure is recoverable.
We maintain insurance coverage that may, subject to the terms and conditions of the policy and payment of significant deductibles, cover certain aspects of cybersecurity issues.

ORBIT360 Internal Audit and Information Security Assurance regularly conducts tests utilizing various methods to verify compliance with written policies and to assess vulnerabilities. In addition, ORBIT360 teams support examinations from multiple regulatory bodies and commission independent penetration tests.

Service Organization Control audits are performed annually to produce independent verification and testing of ORBIT360 controls for external parties and auditors that rely on ORBIT360 Series LLC. The scope of these reports are evaluated each year and tailored in response to customer feedback and business developments. If you have any questions about the reports or this process, please reach out to: ThirdPartyDueDiligence@Orbit360series.com

Due to the number of requests received from regulators, members, customers of subsidiaries, and other stakeholders, ORBIT360 does not respond to individual inquiries or questionnaires from customers regarding the security of ORBIT360 systems. Further, to protect the security and integrity of ORBIT360 environments, it is company policy that we do not share information related to internal policies and procedures with third parties. We understand that our customers, as part of their internal vendor management procedures, request information related to security processes and posture from their vendors from time to time. As such, ORBIT360 shares Service Organization Control audit reports with our customers that independently validate our internal information security controls. To obtain these reports, please reach out to: ThirdPartyDueDiligence@Orbit360series.com. For questions about this procedure please contact the ORBIT360 Third Party Risk Management Team directly or via your account representative.

  • ORBIT360 does not ask individuals or entities for money or other assets.
  • Unfortunately, there are criminals who take advantage of ORBIT360’s good reputation to impersonate ORBIT360 or its affiliates to scam individuals or entities. They even create fake websites and applications to do so.
  • If someone claims to be a representative of an ORBIT360 platform and asks you to provide money or other assets to them, they are scamming you. Stop dealing with them immediately and contact law enforcement.
  • ORBIT360 may take any information you provide about the scammers and send it to appropriate authorities, but ORBIT360 undertakes no obligation to do so.

Report security concern


Scroll to Top