The Securities and Exchange Commission’s office of Compliance Inspections and Examinations released a report on observations relating to cybersecurity and best practices by financial market participants.
The observations are based on thousands of examinations of broker-dealers, investment advisers, clearing agencies, national securities exchanges and other SEC registrants, according to the report published on the SEC’s website.
The intent is to highlight specific examples of cybersecurity and operational resiliency practices and controls that firms are taking to safeguard against threats, and how they respond in the event of a breach.
OCIE acknowledged that there is no one-size-fits-all approach to cybersecurity and that the approaches highlighted may not be appropriate for all organizations. The observations are meant more as guidelines for firms considering how to improve their cybersecurity preparedness and response procedures.
“Through risk-targeted examinations in all five examination program areas, OCIE has observed a number of practices used to manage and combat cyber risk and to build operational resiliency,” Peter Driscoll, director of OCIE, said in a statement. “We felt it was critical to share these observations in order to allow organizations the opportunity to reflect on their own cybersecurity practices.”
For example, OCIE observed that effective cybersecurity programs begin at the top with senior leaders committed to improving a firm’s defenses. Common elements include a risk assessment to identify, analyze and prioritize security risks; a written cybersecurity policy to address the risks; and the effective implementation and enforcement of those policies.
Areas covered in the report include governance and risk management, access rights and controls, data loss prevention, mobile security, incident response and resiliency, vendor management, and training and awareness.
SEC Chairman Jay Clayton commended OCIE for compiling and sharing the observations and encouraged market participants to incorporate the information into their cybersecurity policies.
“Data systems are critical to the functioning of our markets, and cybersecurity and resiliency are at the core of OCIE’s inspection efforts,” Mr. Clayton said in a statement.
The "Crypto Mom" departure would leave the SEC commission with just two members and no Democratic commissioners on the panel.
IFP Securities’ owner, Bill Hamm, has a long-term plan for the firm and its 279 financial advisors.
Meanwhile, a Osaic and Envestnet ink a new adaptive wealthtech partnership to better support the firm's 10,000-plus advisors, and RIA-focused VastAdvisor unveils native integrations with leading CRMs.
A former Alabama investment advisor and ex-Kestra rep has been permanently barred and penalized after clients he promised to protect got caught in a $2.6 million fraud.
As more active strategies get packaged into the ETF wrapper, advisors and investors have to look beyond expense ratios as the benchmark for value.
Wellington explores how multi strategy hedge funds may enhance diversification
As technical expertise becomes increasingly commoditized, advisors who can integrate strategy, relationships, and specialized expertise into a cohesive client experience will define the next era of wealth management
