Featured Product

    SEC Publishes Observations on Cybersecurity and Resiliency Practices

    January 27, 2020

    The SEC Office of Compliance Inspections and Examinations (OCIE) issued examination observations related to cyber-security and operational resiliency practices of market participants. The observations highlight approaches of market participants in the areas of governance and risk management, access rights and controls, data loss prevention, mobile security, incident response and resilience, vendor management, and training and awareness. The observations cover specific examples of cyber-security and operational resiliency practices and controls that organizations have taken to potentially safeguard against threats and respond in the event of an incident.

    While the effectiveness of any given cyber-security program is fact-specific, it has been observed that a key element of effective program is the incorporation of a governance and risk management program that generally includes, among other things:

    • Developing and conducting a risk assessment process to identify, manage, and mitigate cyber risks relevant to the organization’s business. This includes considering the organization’s business model, as part of defining a risk assessment methodology, and working to identify and prioritize potential vulnerabilities.
    • Adopting and implementing comprehensive written policies and procedures addressing the identified risks.
    • Establishing comprehensive testing and monitoring to validate the effectiveness of cyber-security policies and procedures on a regular and frequent basis. Testing and monitoring can be informed based on cyber threat intelligence.
    • Responding promptly to testing and monitoring results by updating policies and procedures to address any gaps or weaknesses and involving board and senior leadership appropriately.

    OCIE conducts examinations of SEC-registered investment advisers, investment companies, broker-dealers, self-regulatory organizations, clearing agencies, transfer agents, and others. It uses a risk-based approach to examinations to fulfill its mission to promote compliance with U.S. securities laws, prevent fraud, monitor risk, and inform SEC policy.

     

    Related Links

    Keywords: Americas, US, Securities, Operational Resilience, Governance, Data, Cyber Risk, SEC

    Featured Experts
    Related Articles
    News

    APRA Updates Validation and Derivation Rules in September 2020

    APRA updated the lists of the Direct to APRA (D2A) validation and derivation rules for authorized deposit-taking institutions, insurers, and superannuation entities.

    September 24, 2020 WebPage Regulatory News
    News

    EC Proposes Frameworks for Crypto-Assets and Operational Resilience

    EC adopted a package that includes the digital finance and retail payments strategies and the legislative proposals for regulatory frameworks on crypto-assets and digital operational resilience.

    September 24, 2020 WebPage Regulatory News
    News

    ECB Publishes Opinion on Proposals to Amend Securitization Framework

    ECB published an opinion (CON/2020/22) on proposals for regulations amending the securitization framework of EU, in response to the COVID-19 pandemic.

    September 24, 2020 WebPage Regulatory News
    News

    FCA Consults on Regulation of International Firms in UK

    FCA is consulting on its approach to the authorization and supervision of international firms operating in UK.

    September 23, 2020 WebPage Regulatory News
    News

    MAS Amends Notice on Capital Adequacy Requirements of Banks

    MAS published amendments to Notice 637 on the risk-based capital adequacy requirements for reporting banks incorporated in Singapore.

    September 23, 2020 WebPage Regulatory News
    News

    FCA to Begin to Move Firms to New Data Collection Platform RegData

    FCA announced that it will move firms to RegData from Gabriel in the coming months in stages, based on the reporting requirements of firms.

    September 23, 2020 WebPage Regulatory News
    News

    ISDA Expects IBOR Fallbacks to be Effective by End of January 2021

    ISDA issued a letter to regulators to flag that it now expects the supplement to the 2006 ISDA Definitions and the Interbank Offered Rate (IBOR) Fallbacks Protocol to be effective around mid- to late-January 2021.

    September 23, 2020 WebPage Regulatory News
    News

    APRA Reviews Repayment Deferral Plans, Identifies Best Practices

    APRA has concluded its review of the comprehensive plans of authorized deposit-taking institutions for the assessment and management of loans with repayment deferrals.

    September 22, 2020 WebPage Regulatory News
    News

    ESAs Assess Risks to Financial Sector After COVID-19 Outbreak

    ESAs (EBA, EIOPA, and ESMA) published the first joint report that assesses risks in the financial sector since the outbreak of the COVID-19 pandemic.

    September 22, 2020 WebPage Regulatory News
    News

    BoE Confirms Withdrawal of COVID Corporate Financing Facility

    BoE and HM Treasury confirmed that the COVID Corporate Financing Facility (CCFF) will close for new purchases of commercial paper, with effect from March 23, 2021.

    September 22, 2020 WebPage Regulatory News
    RESULTS 1 - 10 OF 5836