To help validate our approach to managing our governance, risk and compliance processes, eFront has engaged Verizon since 2013, through their Security Management Program offering. The Verizon Security Management Program (SMP) is an enterprise security control assessment and validation program, based on ISO/IEC 27001 and 27002. SMP helps organizations manage their governance, risk, and security compliance processes, and eFront has received SMP certification from Verizon for 2013 and 2014.
SMP certification is different from SSAE16, in that it focuses on data privacy practices. The SMP audit is detailed and rigorous, and with SMP certification, our clients can be assured that Investment Café handles their private data properly. Because of the depth of this audit, SMP also helps eFront remain in compliance with TRUSTe and Safe Harbor requirements, allowing us to more easily renew these certifications.