How do we protect funding wires from settlement-agent impersonation?▼
Treat wiring instructions as untrusted until verified through a channel the attacker doesn’t control. That means confirming bank details by phone with the title or settlement agent at a number from your approved vendor list, not from the email. Add dual approval in your warehouse bank portal, alerts on any change to payee data, and MFA on the mailboxes that receive closing traffic so attackers can’t sit inside watching schedules. Some lenders also use third-party title agent verification services. We help you write the procedure, configure the technical controls and train funders.
We use Encompass. What access problems do you typically find?▼
The common ones are personas carrying more rights than the job requires, a few shared admin or service accounts, users who left but still have active logins, and broad API credentials granted to integrations years ago. None of those mean your system is badly run; LOS environments just accumulate access over time. We work alongside your Encompass administrator, never around them, to review personas, tie logins to single sign-on with MFA, retire shared accounts and schedule recurring access reviews.
Do Fannie Mae and Freddie Mac have security requirements for sellers?▼
The agency seller and servicer guides include information security expectations for approved lenders, and they’ve added provisions around reporting certain cybersecurity incidents. The exact wording, timelines and what counts as a reportable incident should come from your compliance team reading the current guides. What we provide is the technical foundation those requirements assume: access controls, monitoring, incident response planning and the logs needed to tell your compliance team quickly what happened if something does.
What does the FTC Safeguards Rule require of a non-bank lender?▼
Non-bank mortgage lenders are financial institutions under the FTC’s Safeguards Rule, 16 CFR Part 314. It requires a written information security program overseen by a Qualified Individual, a written risk assessment, access controls, encryption of customer information, MFA, secure development practices for any in-house apps, vendor oversight, staff training, monitoring or periodic testing, an incident response plan and an annual written report to your board. The amended rule also requires notifying the FTC after certain security events, a decision your counsel should own.
Can you support our branches in several states?▼
Yes. Most of our work is remote, handled by U.S.-based engineers who manage endpoints, identity and security tools centrally. For hands-on needs like a new branch buildout, a failed switch or printer swap, we handle it directly near our offices or send a vetted local technician directed by our engineer. Branches get the same configuration baseline, so a loan officer moving between locations has the same experience and the same controls.
How quickly can we recover our loan files after ransomware?▼
That depends on what you test now. We back up email, shared drives, local closing packages and any on-premises servers to immutable storage that ransomware can’t encrypt, then run restore tests and time them. From those results we write a recovery runbook that prioritizes what funding and closing need first. You’ll know realistic recovery times before an incident instead of discovering them during one, and your LOS vendor’s own recovery commitments are documented alongside ours.
Do you provide Mortgage Lenders IT Services in Houston and nearby areas?▼
Yes. LayerLogix is based in the Greater Houston area and delivers mortgage lenders IT services to businesses across Houston and the surrounding communities, including The Woodlands, Spring, Katy, Sugar Land, Conroe, Cypress, and Pearland. For most Houston-area clients we can be on-site the same day when something needs hands-on attention, and our help desk is available during business hours, with after-hours emergency support. Call 713-571-2390 to check coverage for your specific address.
What does Mortgage Lenders IT Services cost for a Houston business?▼
Pricing depends on your size and what you need, so we do not publish a one-size-fits-all number — but Houston businesses generally pay a flat, predictable monthly fee rather than surprise hourly bills. We start with a free, no-obligation assessment of your current setup, then give you a clear quote in plain English with no hidden costs. That way you know exactly what you are getting and what it costs before you commit.