SEC urges advisers to draw up and implement cybersecurity plans

SEC urges advisers to draw up and implement cybersecurity plans
Next step could be to hold them accountable for data breaches.
MAY 05, 2015
The Securities and Exchange Commission is pushing investment advisory firms to establish and implement formal, written policies to combat data breaches. “Create a strategy that is designed to prevent, detect and respond to cybersecurity threats,” the SEC Division of Investment Management said in a guidance update released on Tuesday. “Implement the strategy through written policies and procedures and training … [for] officers and employees.” The document recommends that firms conduct periodic assessments of the data it collects, the vulnerabilities of their information systems, the security controls they have in place, the potential consequences of a breach and their plan to manage such an assault. A cybersecurity strategy could include using credentials and authentication to restrict access to firm data as well as encrypting and backing up data. The guidance follows cybersecurity exams that the SEC and the Financial Industry Regulatory Authority Inc., the industry-funded broker-dealer regulator, conducted last year. Both organizations have made cybersecurity an examination priority for the past two years, and the SEC hosted a roundtable on the topic last year. The guidance underscores the fact that the SEC is making cybersecurity a regulatory obligation, said Todd Cipperman, principal at Cipperman Compliance Services. “It puts the whole cybersecurity compliance program on the chief compliance officer's desk,” Mr. Cipperman said. “It means CCOs are going to have to step up their IT game. They don't need to become IT experts, but they do need to become IT competent.” Although the guidance doesn't carry the force of a rule and is not legally binding, it does outline what the SEC will be looking for when it conducts exams. Advisers should take heed, said Brian Rubin, a partner at Sutherland Asbill & Brennan. “They should be thinking long and hard about why their procedures or processes are different from what is suggested,” Mr. Rubin said. “Broker-dealers should review [the guidance], too, even though it does not apply to them.” The next step for the SEC could be cybersecurity enforcement actions, Mr. Cipperman said. The agency also could show up at the door of an advisory firm after a data breach to assess the cyber defense it had implemented. “You ignore this guidance at your own peril,” Mr. Cipperman said.

Latest News

Farther debuts AI investment proposal tool for advisors to win clients
Farther debuts AI investment proposal tool for advisors to win clients

"Im glad to see that from a regulatory perspective, we're going to get the ability to show we're responsible [...] we'll have a little bit more freedom to innovate," Farther co-founder Brad Genser told InvestmentNews.

Are you optimally efficient?
Are you optimally efficient?

Taking a systematic approach to three key practice areas can help advisors gain confidence, get back time, and increase their opportunities.

Advisor moves: Father-son duo leaves Raymond James for LPL, RayJay adds Merrill Lynch alum in Florida
Advisor moves: Father-son duo leaves Raymond James for LPL, RayJay adds Merrill Lynch alum in Florida

Meanwhile, Osaic lures a high-net-worth advisor from Commonwealth in the Pacific Northwest.

Beacon Pointe adds six RIAs in two-month acquisition spree, boosting AUM by $2.7B
Beacon Pointe adds six RIAs in two-month acquisition spree, boosting AUM by $2.7B

The deals, which include its first stake in Ohio, push the national women-led firm up to $47 billion in assets.

RIA moves: RWA Wealth Partners strengthens leadership as $8B Procyon widens Northeast footprint
RIA moves: RWA Wealth Partners strengthens leadership as $8B Procyon widens Northeast footprint

The Dynasty Financial partner firm's latest deal in Connecticut adds roughly $600 million in client assets.

SPONSORED How advisors can build for high-net-worth complexity

Orion's Tom Wilson on delivering coordinated, high-touch service in a world where returns alone no longer set you apart.

SPONSORED RILAs bring stability, growth during volatile markets

Barely a decade old, registered index-linked annuities have quickly surged in popularity, thanks to their unique blend of protection and growth potential—an appealing option for investors looking to chart a steadier course through today's choppy market waters, says Myles Lambert, Brighthouse Financial.