Cybersecurity weaknesses worry state RIA regulators

More than 698 deficiencies found in 1,200 exams, says NASAA

Sep 25, 2017 @ 1:01 pm

By InvestmentNews

More than 1,200 coordinated examinations of state-registered investment advisers by state securities examiners in 37 jurisdictions uncovered 698 deficiencies involving cybersecurity, the North American Securities Administrators Association (NASAA) said.

In examinations conducted between January and June 2017, NASAA said the top five cybersecurity deficiencies found by state examiners were: nonexistent or inadequate cybersecurity insurance, no testing of cybersecurity vulnerability, lack of procedures regarding securing or limiting access to devices, no technology specialist or consultant, and a lack of procedures regarding hardware and software updates or upgrades.

At the group's annual meeting this week in Seattle, Mike Rothman, NASAA president and Minnesota's commissioner of commerce, said the group has created a tool for state-registered investment advisers to help them assess their cybersecurity preparedness. Called the NASAA Cybersecurity Checklist for Investment Advisers, it includes 89 assessment areas to help identify, protect and detect cybersecurity vulnerabilities, and to respond to and recover from cyber events.

Overall, the group said that 1,203 reported examinations of state-registered investment advisers uncovered 7,907 deficiencies in 25 compliance areas, compared to 4,983 deficiencies in 22 compliance areas uncovered by 1,170 examinations in 2015. This sample data from state securities examiners is collected every two years and reported voluntarily to NASAA's investment adviser operations project group.

Ranked by number of deficiencies found, books and records (2,625 deficiencies) continued to be the most problematic compliance area, followed by registration (1,165 deficiencies), contracts (921), cybersecurity (698) and custody matters (364).

State securities regulators have regulatory oversight responsibility for investment advisers with assets under management of $100 million or less.

0
Comments

What do you think?

View comments

Recommended for you

Featured video

INTV

How advisers can engage clients to see if they value ESG

A focus on environmental, social and governance can keep clients more connected to their advisers, according to impact investing expert Colleen Denzler.

Latest news & opinion

Morgan Stanley rides wealth management train to solid first quarter

Chairman and CEO James Gorman expresses excitement about expanding into workplace plans with purchase of Solium.

Fate of New Jersey fiduciary standard could come down to politics, court

With strong support from N.J. Gov. Phil Murphy, the proposal has momentum out of the gate.

Growing wealth fuels demand for family offices

The market for serving wealthy families may be bigger than some data suggest.

FPA backs away from controversial plan to merge chapters

The group is no longer seeking to dissolve local chapters as separate legal entities.

RIA succession plan takes the long view

The transfer of ownership over 22 years leverages company shares as an employee reward-and-retention tool.

X

Hi! Glad you're here and we hope you like all the great work we do here at InvestmentNews. But what we do is expensive and is funded in part by our sponsors. So won't you show our sponsors a little love by whitelisting investmentnews.com? It'll help us continue to serve you.

Yes, show me how to whitelist investmentnews.com

Ad blocker detected. Please whitelist us or give premium a try.

X

Subscribe and Save 60%

Premium Access
Print + Digital

Learn more
Subscribe to Print