Your information is in safe hands

At North, our commitment to protecting advisers and their clients when it comes to their savings and personal information is unwavering.  

Preventing information from misuse, loss or unauthorised access is a job we take seriously, and we’re committed to providing robust security and privacy measures to ensure the confidentiality and integrity of all the information we hold. 

Our expert cyber security team is continuously monitoring threats and rigorously assessing our systems to ensure their integrity and safety. These efforts are backed by 24/7 system surveillance and external validation from independent cyber security consultants.  

We actively collaborate with industry leaders, including the Australian Cyber Security Centre, law enforcement agencies, and industry organisations, to stay ahead of potential risks as much as possible. Our participation in the Australian Banking Association’s Scam Working Group and the Fraud Reporting Exchange helps us remain informed of emerging threats and equips us with intelligence to safeguard our systems effectively. 

Here are some other ways we provide top-notch protection:  

• Compulsory multi-factor authentication. We know it can be annoying, but it’s a necessary step to ensure only authorised access at login and for certain online operations. We’ll also ask users to verify their identity via SMS for high-risk tasks. 
• Account lockouts. Restricting access after multiple failed login attempts. 
• Email and SMS notifications. For sensitive activities or key changes to member account details, with instructions to contact North if the change was not initiated by the member. 
• Additional reviews and approval. Required for highly sensitive activities such as updates to nominated banking details.  
• Resilient infrastructure. We have duplicate systems across multiple data centres, ensuring continuous service availability. 
• Secure communication. Our network protections and protocols safeguard all data exchanges, with transparent encryption enabled for client information, both in transition and at rest. 
• Web Application Firewall (WAF) and bot detection capabilities. To identify and block malicious traffic, including automation and brute force attacks such as credential stuffing. 
• Continuous vigilance. Regular reviews of security logs, threat scanning, and intrusion detection systems to identify and address suspicious activity and evolving cyber threats. 
• Advanced 24/7 monitoring. Automated systems and a dedicated team to detect and respond to suspicious activities and anomalies immediately.  
• Digital risk monitoring. To detect unauthorised disclosures of member and client information on both the clear and dark web.  

While we’re doing everything we can to protect you, remaining vigilant is a part of everyday life now. Here are a few helpful tips for you and your clients on staying safe online.  

And if you have any questions or concerns, please don’t hesitate to get in touch.