Guildwell maintains a security and operational resilience framework designed to protect its systems, information and financial services.
Controls are applied according to the nature of the service, the sensitivity of the information involved and the regulatory obligations of the entity providing it.
Information and systems protection
Guildwell applies layered technical and organisational controls designed to protect systems and information from unauthorised access, loss, misuse, disruption and compromise.
Access to systems and information is restricted according to business need and subject to appropriate authentication, oversight and control.
Information is protected using security measures appropriate to its sensitivity and the systems through which it is processed.
Resilience
Guildwell maintains business continuity and recovery arrangements designed to support critical services during operational or technology disruption.
These arrangements consider the systems, people and external dependencies required to continue or restore important services while maintaining appropriate client, data and regulatory protections.
Testing and review
Security and resilience controls are reviewed and tested periodically and following material changes where appropriate.
Identified issues are assessed, remediated and escalated through the relevant governance processes according to their significance.
Independent or specialist review may also be used where appropriate.
Incident management
Guildwell maintains procedures for identifying, assessing, containing and responding to security, privacy and operational incidents.
Material incidents are escalated and handled according to the legal and regulatory requirements applicable to the responsible entity.
Where notification or reporting is required, it is managed through the appropriate regulatory and governance process.
Third-party dependencies
Guildwell uses external financial, technology and infrastructure providers in the delivery of its services.
Material dependencies are subject to risk assessment and ongoing oversight appropriate to their role and importance.
The use of a third party does not transfer responsibility for the obligations that remain with the Guildwell entity providing the relevant service.
Entity responsibility
Security and operational resilience requirements are applied according to the activities and regulatory obligations of Guild Financial in Canada and Sparling Financial in the Cayman Islands.
Shared technology, personnel or service providers do not transfer regulatory accountability from the entity responsible for the relevant activity.