Security framework available to public

Equifax is making its security and privacy controls framework public for the benefit of security and privacy teams at organizations of all sizes. Five core capabilities – cybersecurity, privacy, fraud prevention, crisis management, and physical security – are represented in the security and privacy controls framework. Equifax selected the National Institute of Standards and Technology’s Cybersecurity Framework (NIST CSF) and Privacy Framework (NIST PF) as the foundation for its security and privacy controls because these guidelines support a comprehensive, defense-in-depth approach to security and privacy. Their flexible, risk-based structures can also be tailored to meet a company's specific needs. The Equifax security and privacy controls framework can be found on controlsframework.equifax.com