top of page
  • Writer's pictureDeborah

Published on February 9 by the Securities and Exchange Commission (SEC) the Proposed rule will require registered investment companies and funds as well as registered investment advisers to implement written policies and procedures to address their cybersecurity risks.

The policies and procedures should covers areas such as:

  • User security and access to prevent unauthorised access to information and systems

  • Information protection to prevent unauthorised access and use through periodic assessment

  • Threat and vulnerability management to detect, mitigate, and remediate cybersecurity threats and vulnerabilities with respect to adviser or fund information and systems.

  • Cybersecurity incident response and recovery to detect, respond to, and recover from a cybersecurity incident

The Proposed rule also includes amendments to the requirements relating to recordkeeping, the reporting of incidents to the SEC as well as to the disclosure of cybersecurity risks and incidents to clients and investors.

Recent Posts

See All

Product Corner - VAs : Quèsaco

Virtual Assets (VAs) or crypto assets refer to : “any digital representation of value that can be digitally traded, transferred or used for payment. It does not include digital representation of fiat

Upcoming Regulatory Deadlines to Watch

10 Aug 2023 - Deadline to submit comments to FCA Guidance Consultation (GC23/1) on crypto asset financial promotions. 5 Sep 2023 - Effective date of SEC Cybersecurity Risk Management, Strategy, Govern


bottom of page