Information Security Approach for FMC Portal

This document is a white paper that outlines LSEG’s approach to information security and compliance for the Financial Modelling and Conversion (FMC) Portal. It describes the governance structure and risk management framework employed by LSEG, which includes a Three Lines of Defence model that ensures appropriate segregation of duties. The paper details the processes for risk identification, assessment, monitoring, and reporting. It also highlights the role of the Chief Information Security Officer in defining security standards and controls. Additionally, the document discusses the importance of security in human resources, mergers and acquisitions, and asset management. It presents the data classification and handling standards, technical controls aligned with global industry standards, and the formal change management procedures. Furthermore, the white paper addresses security operations, incident response plans, disaster recovery, and third-party security requirements, emphasizing the commitment to protecting customer data and maintaining a secure environment.