Privacy & Data Security
Protecting the privacy, integrity and security of our customers’ data and enterprise network is a top priority for OneMain.
Cyber Vigilance
We are focused on building a cyber-vigilant culture through education and training, such as teaching our team members:
Our cybersecurity team participates in the Financial Services Information Sharing and Analysis Center with other industry groups.
Together, we share best practices and work to improve our ability to detect, respond and recover from threats.
Our cybersecurity team, led by our Chief Information Security Officer, works to protect our systems against attacks and proactively takes steps to protect our customers, team members and company.
We take data security seriously, continuously enhancing our programs to improve our resilience against threats and strengthen the security of company and customer data.
We invest in a third-party cybersecurity risk management program that:
- Assesses the cybersecurity risk of our vendors.
- Monitors vulnerability.
- Helps us remedy any cybersecurity incidents third parties may experience.
Risk Response & Capability Improvement
Service Organization Control
(SOC) 2 Report:
OneMain undergoes an annual SOC 2 Type II audit, which verifies that OneMain security controls are designed in accordance with the AICPA Trust Services Principles and Criteria.
Learn how we prioritize our customers, communities and team members in our Impact Reports.
Download 2023 Report