FMS Systems, Security, and Privacy

FULLY LICENSED IN ALL 50 STATES, THE DISTRICT OF COLUMBIA, AND TERRITORIES FOR DEBT COLLECTION - APPROVED GSA SCHEDULE VENDOR

	SYSTEMS, SECURITY, AND PRIVACY

	SECURITY AND PRIVACY
	FMS has made a significant investment in protecting information and therefore have spared no expense in infrastructure or training to ensure all privacy safeguards are in place. FMS meets, and in many cases, exceeds the requirements set under Section 501(b) of the Gramm-Leach-Bliley Act (GLBA) and the guidelines set under the National Institute of Standards (NIST) for Small Entity Compliance Guidelines for Privacy and Security.

	Clients, consumers, citizens, and vendors can be assured of our commitment to exceed regulatory safeguards as follows:

	PHYSICAL BUILDING ACCESS
	Class A Building with landlord controlled, proximity card controlled access FMS-controlled badged, proximity card controlled access systems Cameras at all entry, exit, and sensitive areas Security system with motion detectors, alarmed and monitored 24 X 7 X 365
	SYSTEMS AND NETWORKS
	Network protected by CISCO PIX firewall User security access controlled by multi -tiered operating system and application systems AS/400 security is set at Level 40, which meets Department Of Defense (DOD) security standards Industry compliant Encryption standards Fully active virus and patch update and maintenance protocols Fully integrated collection and case management system, predictive dialer with Interactive Voice Response (IVR), and telephone system 100% telephone recording and monitoring functions Intelligent system – learning ability and intelligence built in through business rules
	OTHER CONTROLS
	Pre-employment screening of hires includes Nationwide Felony Checks and Full Background Check Bi-annual Security Awareness Training and Refresher Training for all employees
	CERTIFICATIONS
	PCI Compliant – Level Three SAS70 Level Two Certification – In Progress
	INFRASTRUCTURE STANDARDS
	FMS’ Information Technology infrastructure was designed to meet government standards and complies with the following standards:
	Interagency Guidelines for Small Entity Compliance under Section 501(b) of the Graham Leach Bliley (GLB) Act and Section 216 of the Fair and Accurate Credit Transactions (FACT) Act OMB Circular A-130, Appendix III, Security of Federal Automated Information Resources and therefore complies with the guidelines of the Computer Security Act of 1987 FMS is currently reviewing quotes from vendors to initiate and complete a Statement on Auditing Standards No. 70 Service Organizations audit and expects to initiate this in late November 2007 VISA™ PCI Compliant certification as a Level III servicer
	DISASTER RECOVERY & BUSINESS CONTINUITY
	Multiple redundancies and backups – stored both on and offsite in a secured certified vault Fully tested Disaster Recovery Plan along with hot site