Equifax Releases 2022 Security Annual Report

Staff Report

Monday, April 3rd, 2023

Equifax today released its 2022 Security Annual Report, highlighting the year's accomplishments and future challenges for the industry in cybersecurity. The third annual report reflects Equifax's enhanced security transparency measures, expansion of the company's public-private security partnerships, and joint innovation with vendors to augment its security toolset and bring new capabilities to the broader market.

"In 2022, we shifted from an era of building the Equifax Cloud™ to securely leveraging the Cloud for innovation and growth," said Mark W. Begor, CEO of Equifax. "As we have grown and innovated to meet the evolving needs of global consumers and customers, we have also committed to partnering with them in new ways. Cybersecurity is critical to that partnership. We believe that more communication, more collaboration, and more transparency, equals stronger security and are committed to helping customers, partners and consumers strengthen their own cybersecurity postures for the benefit of the industry at large."

Over the past year, Equifax achieved multi-cloud environment security parity; established tiered control priority and risk-based reporting for its acquisition processes; expanded its personalized Security Scorecards to include Equifax contractors; earned U.S. Health Insurance Portability and Accountability Act (HIPAA) compliance for two key environments; and obtained Secret Facility Security Clearance from the Government of Canada.

"The 2022 threat landscape presented challenges none of us can solve alone," said Jamil Farshchi, Executive Vice President and Chief Information Security Officer of Equifax. "Our answer to this is partnership. Equifax has established a bold vision to address some of security's most intractable challenges and worked cooperatively over the last year to shape security behaviors, technologies and practices alongside the security vendor community, government agencies, nonprofits, peers and leaders in board of directors governance."

For a third-consecutive year, a leading global research and advisory firm found that the maturity of Equifax's cybersecurity program exceeded every major industry benchmark. Additionally, a leading cybersecurity reporting service found that Equifax's security posture ranked in the top 1 percent of Technology companies and top 3 percent of Financial Services companies analyzed.