Cybersecurity and wire fraud protection for mortgage and title firms
Policies, verification forms and incident playbooks for lenders, brokers and settlement agents, built around wire instructions, payoffs, signer identity and investor and agency reporting.
- Editable Word & Excel
- Instant download
- One-time purchase
What lenders, agencies and underwriters expect
Non-bank mortgage companies are financial institutions under the FTC Safeguards Rule, which requires a written information security program, a Qualified Individual, a risk assessment, multi-factor authentication and FTC notice of breaches involving 500 or more customers.
Fannie Mae requires seller/servicers to report cybersecurity incidents within 36 hours of identification, and Freddie Mac has its own reporting rules. ALTA's Best Practices framework expects title and settlement agents to protect nonpublic personal information and, in its 2025 update, to verify signer identity and train staff on impersonation fraud.
This kit puts those expectations into policies, a wire instruction and payoff verification form, a breach notification worksheet and tabletop exercises.
Every file in each edition
Policy numbers carry over from the Starter Kit to the Professional Edition, so you can start small and upgrade without renumbering.
Starter Kit
$14924 editable files
Policies 15
- MT-CYB-001Information Security Program & Qualified Individual Policy
- MT-CYB-002Risk Assessment & Customer Information Inventory Policy
- MT-CYB-003Access Control & Least Privilege Policy
- MT-CYB-004Multi-Factor Authentication Password Policy
- MT-CYB-005Encryption & Secure Information Exchange Policy
- MT-CYB-006Acceptable Use & Workstation Security Policy
- MT-CYB-007Email Security, Phishing & Impersonation Policy
- MT-CYB-008Personnel Security & Confidentiality Policy
- MT-CYB-009Security Awareness & Training Policy
- MT-CYB-010Physical Security & Clean Desk Policy
- MT-CYB-011Backup, Recovery & Business Continuity Policy
- MT-CYB-012Records Retention & Secure Disposal Policy
- MT-CYB-013Service Provider Oversight Policy
- MT-CYB-014Incident Response & Notification Policy
- MT-CYB-015Remote Work & Mobile Device Policy
Plans, guides & assessments 8
- WordImplementation Guide
- WordStaff Cybersecurity Quick Guide
- WordIncident Response Plan
- WordWritten Information Security Program (WISP)
- WordClient Wire Fraud & Information Security Advisory
- Word30-60-90 Day Action Plan
- Word50-Point Cybersecurity Checklist
- WordCybersecurity Maturity Assessment
Workbook 1
- ExcelMortgage & Title CyberSecure Toolkit
Professional Edition
$24942 editable files
Policies 21
- MT-CYB-001Information Security Program & Qualified Individual Policy
- MT-CYB-002Risk Assessment & Customer Information Inventory Policy
- MT-CYB-003Access Control & Least Privilege Policy
- MT-CYB-004Multi-Factor Authentication Password Policy
- MT-CYB-005Encryption & Secure Information Exchange Policy
- MT-CYB-006Acceptable Use & Workstation Security Policy
- MT-CYB-007Email Security, Phishing & Impersonation Policy
- MT-CYB-008Personnel Security & Confidentiality Policy
- MT-CYB-009Security Awareness & Training Policy
- MT-CYB-010Physical Security & Clean Desk Policy
- MT-CYB-011Backup, Recovery & Business Continuity Policy
- MT-CYB-012Records Retention & Secure Disposal Policy
- MT-CYB-013Service Provider Oversight Policy
- MT-CYB-014Incident Response & Notification Policy
- MT-CYB-015Remote Work & Mobile Device Policy
- MT-CYB-016Wire Transfer, Closing Funds & Payoff Verification Policy
- MT-CYB-017Identity Verification & Impersonation Fraud Policy
- MT-CYB-018Vulnerability Management & Security Testing Policy
- MT-CYB-019Generative AI & Cloud Application Use Policy
- MT-CYB-020Privacy Notice & Information Sharing Policy
- MT-CYB-021AI Governance Policy
Plans, guides & assessments 10
- WordProfessional Edition Implementation Guide
- WordIncident Response Plan & Playbooks
- WordTabletop Exercise Kit
- Word30-60-90 Day Action Plan
- WordStaff Cybersecurity Quick Guide
- WordWritten Information Security Program (WISP)
- WordClient Wire Fraud & Information Security Advisory
- Word50-Point Cybersecurity Checklist
- WordCybersecurity Maturity Assessment
- Word50-Question Mortgage & Title Cybersecurity Self-Assessment
Forms & templates 10
- FORM-01Wire Instruction & Payoff Verification Form
- FORM-02Access Request Form
- FORM-03Staff Offboarding Checklist
- FORM-04Software, SaaS & AI Tool Request Form
- FORM-05Security Exception Request
- FORM-06Incident Intake Form
- FORM-07Service Provider Security Questionnaire
- FORM-08Confidentiality Policy Acknowledgment Form
- FORM-09Breach Notification Worksheet
- FORM-10Qualified Individual Annual Report
Workbook 1
- ExcelMortgage & Title CyberSecure Professional Toolkit
Free Mortgage & Title cybersecurity self-assessment
Answer 50 yes / no / not sure questions across 10 areas. Score your results and get clear next steps for your industry.
- Small Business, Law Office, Real Estate, Healthcare, Accounting & Tax, Insurance Agency, Financial Advisor, Auto Dealer, Mortgage & Title, and Cyber Insurance Readiness editions
- Starred priority questions and a scoring table
- Printable PDF
Your assessment is ready
Thanks. Your download should start automatically. If it doesn't, use the button below.
Download the PDFQuestions about your results? Email info@cybriva.ai.
Mortgage & Title kit FAQ
Does it address seller impersonation fraud?
Yes. The Professional Edition includes an Identity Verification & Impersonation Fraud Policy and a tabletop exercise built around a vacant-lot sale.
Is there a client wire fraud warning?
Yes. Both editions include a client wire fraud and information security advisory you can brand and send.
What format are the files in?
Editable Microsoft Word policies, plans and forms plus an Excel workbook. You download everything right after checkout and customize it for your organization.
Can I start with the Starter Kit and upgrade later?
Yes. The Professional Edition keeps every Starter Kit policy under the same ID number, so nothing you have already customized gets renumbered.
Is this legal advice or a certification?
No. Cybriva provides templates and education. It is not legal advice, an audit, a certification or a guarantee of compliance or security. Have your attorney review documents that carry legal obligations.