OUR SECURITY & TRUST PROGRAM
How We Protect What Matters
Defense-in-depth controls securing our environment end to end.
- Data encryption in transit & at rest
- Zero Trust architecture
- Endpoint Detection & Response (EDR)
- SIEM for consolidated event logging
- Physical access controls
The right people get the right access and nothing more.
- Background checks
- Automated HR lifecycle with least access
- Periodic access reviews
- Privileged Access Management (PAM)
- Strong password policy & MFA
- Security awareness training
Resilient by design, so we're there when you need us.
- Geographically resilient data centers
- Annual business continuity & disaster recovery testing
- Incident response readiness
Structured oversight across the enterprise and our vendors.
- Enterprise Risk Management
- Secure SDLC & change management
- Third-Party Risk Management (TPRM)
- Continuous active monitoring
Independently validated, transparently shared.
- NIST-aligned policies & standards
- SOC 1 & SOC 2 Type II reports
- Independent penetration testing
Responsible, transparent use of emerging technology.
- AI risk & technology governance
- Responsible-use principles
- Oversight of AI-enabled tools
RESOURCE LIBRARY
Trust Documents & Resources
Every resource displays a Last Reviewed date and named owner — reviewed at least annually under our content governance model.
The icon indicates that you must register with Unum Group to view the file. Please use the registration form to have the file sent to you.
COMMON QUESTIONS
Frequently Asked Questions
NEED SOMETHING YOU DON'T SEE HERE?
Submit a request for security documentation, a due-diligence review, or a specific compliance question. Our GRC team will follow up with next steps and expected timelines.