Cybersecurity & Digital Risk
Last updated:
Era Finances Group takes the security of client data and digital assets extremely seriously. This page describes our approach to cybersecurity, the measures we take to protect client information, and what to do if you suspect fraudulent activity or impersonation in the name of Era Finances Group.
Our Security Framework
Era Finances Group operates a comprehensive information security programme aligned with internationally recognised standards. Our security controls are designed to protect the confidentiality, integrity, and availability of client data and firm systems.
Our security programme is overseen by the Chief Risk Officer (CRO) and is subject to periodic independent review. Material cybersecurity risks are reported to the Board at least quarterly.
Data Protection Measures
We employ a range of technical and organisational measures to protect client data.
Encryption
All client data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256 encryption. Encryption keys are managed in accordance with industry best practice and rotated regularly.
Access Controls
Access to client data and firm systems is restricted on a need-to-know basis and enforced through role-based access controls. Multi-factor authentication (MFA) is required for all remote access.
Network Security
Our network infrastructure is protected by enterprise-grade firewalls, intrusion detection and prevention systems, and continuous monitoring.
Endpoint Security
All devices used to access firm systems are subject to endpoint protection controls, including anti-malware software, device encryption, and mobile device management (MDM) policies.
Vulnerability Management
We conduct regular vulnerability assessments and penetration tests of our systems and applications. Critical vulnerabilities are remediated on a priority basis.
Third-Party Risk
Era Finances Group conducts due diligence on all third-party service providers who have access to client data or firm systems. Third-party providers are required to notify us promptly of any security incidents.
Incident Response
Era Finances Group maintains a documented Incident Response Plan covering detection, containment, eradication, recovery, and post-incident review.
In the event of a personal data breach, Era Finances Group will notify the relevant supervisory authority within 72 hours and will notify affected individuals where required by applicable law.
Fraud Awareness — Protecting Yourself
Era Finances Group will never ask you to transfer funds to a new bank account by email or telephone without prior written confirmation through established channels. If you receive any communication requesting a change of payment details, contact us immediately before taking any action.
Be alert to: unsolicited contact claiming to be from Era Finances Group; requests for your login credentials; pressure to act quickly; offers of unusually high returns; and requests to transfer funds to unfamiliar accounts.
Clone Firm Fraud
Clone firm fraud occurs when criminals use the name or regulatory details of a legitimate firm to deceive investors. If you are approached by someone claiming to represent Era Finances Group and have any doubt about their legitimacy, please verify their identity by contacting us directly using the contact details on this website.
You can also check the FCA Register (register.fca.org.uk) and the SFC's Public Register to verify the regulatory status of any firm claiming to be authorised.
Reporting a Security Concern
If you believe you have been the victim of fraud involving Era Finances Group, or if you have identified a security vulnerability in our systems, please contact us immediately at [email protected].
Security & Fraud Reporting
[email protected]