The mission of the MISMO Information Security Workgroup (ISWG) is to support the information security concerns of other MISMO workgroups, provide industry security related recommendations, and general security educational material.

Purpose

• Support MISMO’s mission of standardized electronic records
  • Assist MISMO workgroup’s security concerns
• General industry educational material
• Provide “best practices” or “guidance” for security topics

Scope of Work

• Monitor federal and state breach notification legislation
• Resarch and analysis of authentication and integrity practices
• Recommendations for Web/Services SOAP security

How to Participate

The ISWG has bi-weekly calls on Wednesdays at 2PM EST. An agenda is distributed via the MISMO Information Security Workgroup listserv early in the week for conference call topics. Security personnel or interested parties are all welcome to participate. Conference bridge information:

Contact Info

Chair: Dick Taylor , Fiserv
Vice Chair: Cynthia Watson, First American
MSMO Staff Representative: RJ Schlecht, Mortgage Bankers Association

Published papers, research and guidance:

Identifying and Safeguarding Personal Information white paper

State Security Breach Notification Matrix

Snapshot of Sensitive Data Points in MISMO LDD

Remote Authentication White Paper

Securing the Appraisal Process: Understanding the Issues (May, 2008)

Supplemental artifacts drafted by the ISWG

• General I-Guide Security Section
• eClosing Security Section
• XML Signature Guidance

Related References:

• MBA Security Resource Center
• Secure Identity Services Accreditation Corporation
• MISMO Information Security Workgroup (ISWG) Related Security Links