Privacy and Data Security PennyMac’s strong governance protocols are at the foundation of our information security efforts and are based on a precise alignment with all applicable regulatory requirements and industry standards, such as the National Institute of Standards and Technology (NIST) and the International Organization for Standardization (ISO).