Pershing, LLC - Albridge Wealth Reporting Assessor's Report of Certification

To the Management of Pershing, LLC - Albridge Wealth Reporting:

Congratulations on your certification.

We are pleased to report Pershing, LLC - Albridge Wealth Reporting's successful achievement of the Verizon Cybertrust Security Application Certification for the Albridge Wealth Reporting application. This certification is valid until the end of Pershing, LLC - Albridge Wealth Reporting's program agreement with Verizon Business.

By achieving certification through Verizon Security Management Program, Pershing, LLC - Albridge Wealth Reporting can now provide assurance to its customers, partners, auditors/regulators and insurance companies that its application security controls, supporting infrastructure and security development life cycle procedures and policies controls have been examined, measured and validated by an industry leader against a stringent set of application security requirements. Pershing, LLC -Albridge Wealth Reporting's adherence to these standards is re-evaluated by Verizon Business on an ongoing, programmatic basis.

Specifically, the achievement of the Verizon Cybertrust Security Certified Application certification demonstrates that Pershing, LLC - Albridge Wealth Reporting has met or exceeded security requirements in four critical control areas (Secure Applications, Security Management and Process, Secure Networking and Connectivity, Secure Operating Systems and Platforms).

Requirements include:

• Validate security controls of the supporting infrastructure.
• Documentation and implementation of required information security policies, standards, processes and procedures.
• Mitigation of all high and moderate priority findings identified during the review of essential application security and governance controls.
• Mitigation of all high and moderate severity vulnerabilities identified during quarterly application scan tests that are conducted with privileges from every level:
  • Specific testing techniques include parameter testing, cookie poisoning, session hijacking, user privilege escalation, credential manipulation, forceful browsing, configuration subversion, input validation bypass, SQL injection and cross-site scripting.
  • Specific mobile application testing techniques include testing for unintended data leakage, insecure data storage, insecure communication, improper session handling, user privilege escalation, hardcoded secrets, improper platform usage, and extraneous functionality.

As a Verizon Cybertrust Security Certified organization, Pershing, LLC - Albridge Wealth Reporting is permitted to display the Verizon Cybertrust Security Certified Application seal. The seal assures customers and partners that Pershing, LLC - Albridge Wealth Reporting is committed to proactively addressing security threats.

Control validation activities associated with the program will be repeated during Pershing, LLC - Albridge Wealth Reporting's engagement with Verizon Business to verify its ongoing compliance. Pershing, LLC - Albridge Wealth Reporting's failure to comply with certification standards within the required timeframe will result in decertification and immediate revocation of permission to use or display the Verizon Cybertrust Security Certified Application seal.