Information Security Program
Last updated: November 9, 2026
This is a summary of safeguards Claridge Law Firm LLC maintains to protect client and consumer information, aligned with the GLBA Safeguards approach and NIST CSF concepts.
Governance
The firm's principal is responsible for the security program, reviews risks at least annually and maintains written procedures.
Technical safeguards
- Encryption in transit (TLS 1.2 or higher) and at rest for devices and stored data
- Multi-factor authentication for email and cloud systems
- Automatic patching, endpoint protection and firewalls
- Role-based access using least privilege
- Regular encrypted backups with tested restoration
- Logging of access to consumer report data
Physical safeguards
Locked office, screen locks, clean-desk practice and secure shredding of paper records.
Personnel
Confidentiality obligations, security training and prompt removal of access when roles change.
Vendors
Service providers handling sensitive data must have appropriate security commitments.
Incident response
Suspected incidents are contained, investigated and documented, and affected parties, regulators and reporting agencies are notified as required by law and contract.