NCBA Committed to Security Program (CTS)
Raising the Bar on Vendor Risk Management
Managing third party risk is more complex than ever. Law firms and creditors are under pressure to meet growing cybersecurity expectations, reduce vendor risk exposure, and stay ahead of evolving regulations. Yet, the current approach – fragmented assessments, repetitive documentation, and rising costs – isn’t sustainable.
That’s why NCBA created the Committed to Security program.
Built exclusively for the legal and collections community, the Committed to Security (CTS) program simplifies vendor risk management through a centralized, scalable, and independent due diligence platform - giving vendors a credible risk score and giving members the confidence to do business with trusted, security-conscious partners.
Why It Matters
CTS isn’t just another compliance checkbox; it’s a mark of credibility. By demonstrating a vendor’s security posture in a clear and verified way, CTS gives law firms and their clients greater confidence in their ability to protect sensitive data and manage risk effectively. And for vendors, it’s a chance to prove security maturity without drowning in duplicative documentation.
Key Program Features
- Built on the Secure Controls Framework (SCF)
The foundation of CTS is a widely respected security framework that maps to dozens of industry standards. - Dynamic Scoping by Vendor Profile
Assessments automatically scale based on each vendor’s business type, size, and risk posture—so the process is fair, efficient, and relevant. It enables risk-based, right-sized assessments. - Independent Review
All assessments are conducted by ConvergentDS, an experienced cybersecurity firm that brings third-party credibility and deep industry knowledge. - Streamlined and Centralized
Reduces assessment fatigue, lowers costs, and promotes consistency across your ecosystem. - Sanctum
Vendor security insights in one place. Creditors, law firms, and vendors can access Sanctum, a secure, cloud-hosted governance, risk, and compliance platform, to track, evaluate, and collaborate on due diligence and remediation activities.
What to Expect
- A clear, efficient process from start to finish.
Participating in the Committed to Security program is simple, structured, and designed to minimize disruption to your team. - Tailored Assessment
The CTS assessment is customized to match your organization’s specific size, complexity, and risk posture, so you’re only evaluated on what’s relevant. - Secure Documentation Submission
You’ll receive a documentation checklist. Upload your evidence to a secure data room - no long-form questionnaires or duplicate requests. - Direct Assessor Support
A certified assessor reviews your submission and will reach out with any clarifications to ensure accuracy and completeness. - Clear, Audit Ready, Shareable Report
You receive a detailed report that reflects vendor security posture which can be confidently shared with clients and law firms. - Remediation Management
If gaps are identified, vendors receive clear, prioritized recommendations. Our team can provide guidance and confirm remediation actions are complete, ensuring you meet the CTS program’s security standards. - Ongoing Guidance
Security isn’t static. As industry standards evolve, the CTS program evolves, helping vendors stay aligned with emerging risks and regulatory expectations.
CTS Program Benefits
Join NCBA's Committed to Security Program
The Committed to Security program is a path to stronger vendor security, lower costs, and less complexity. It reduces the burden of due diligence so teams can focus on delivering real value, not managing endless documentation.
Questions? Contact liz@creditorsbar.org.
About ConvergentDS
ConvergentDS is NCBA’s trusted security advisor, with global expertise in:
- Advisory security consulting
- Compliance readiness
- Due diligence & risk assessments
- Managed vulnerability services
- Penetration testing
- Privacy regulation strategy
Their client-first approach ensures tailored, high-quality service that fits the unique demands of law firms practicing creditors rights.
Committed to Security Program (CTS) FAQs
-
What is Committed to Security?
Committed to Security is a scalable vendor security program purpose-built for the legal collections industry. Key features include:
- Built on the Secure Controls Framework (SCF)
The foundation of CTS is a widely respected security framework that maps to dozens of industry standards. - Dynamic Scoping by Vendor Profile
CTS assessments automatically scale based on each vendor’s business type, size, and risk posture—so the process is fair, efficient, and relevant. It enables risk-based, right-sized assessments. - Independent Review
All assessments are conducted by ConvergentDS, an experienced cybersecurity firm that brings third-party credibility and deep industry knowledge. - Streamlined and centralized: Reduces assessment fatigue, lowers costs, and promotes consistency across your ecosystem.
- Built on the Secure Controls Framework (SCF)
-
Why it Matters?
The Committed to Security (CTS) program demonstrates a vendor’s security posture in a clear, credible way, giving clients greater confidence in your ability to protect sensitive data and manage risk effectively. It serves as a visible symbol of your dedication to strong, responsible security practices.
- What is the Due Diligence Process?
- Quick onboarding call – We’ll introduce the process and timing.
- Secure evidence upload – Vendors submit documentation to a secure data room; CDS handles the rest.
- Assessor due diligence – A dedicated assessor will review materials and reach out with any questions.
- Review and next steps – Once complete, we’ll walk the vendor through the report and discuss actionable next steps. Once complete, a vendor identifies which law firms and creditors they would like to have access to their report.
-
How is Data Protected?
A secure portal link is provided for data requests. Data is protected with AES-256 and transmitted using end-to-end encryption. Final reports are delivered via secure digital links that are:
- user-specific
- protected by multi-factor authentication
- programmed to self-destruct after use
-
How Do We Get Started?
Reach out to Liz Terry to learn more.
About the Program
What People Are Saying
“The Committed to Security Program sets a new standard for security assurance —streamlining vendor oversight while strengthening trust with clients.”
~ Liz Terry, Executive Director, NCBA
“We built the Committed to Security program to solve a real problem in the legal collections industry - too many duplicative assessments, not enough time/resources, and rising client expectations. We use a scalable, trusted framework that works for vendors and clients alike, while raising the bar for security across the entire ecosystem.”
~ Chris Johnson, CEO, ConvergentDS