Law.com Subscribers SAVE 30%

Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.

<b><i>Online Extra:</b></i> SEC to Focus on Cybersecurity Compliance in 2016

By Marlisse Silver Sweeney
January 26, 2016

In 2016, the U.S. Securities and Exchange Commission will remain focused on assessing cybersecurity efforts by investment adviseors and broker-dealers. The agency's Office of Compliance Inspections and Examinations'announced its 'examination priorities' for the year'on Jan. 13 and cybersecurity protocols were once again a top concern. This is the third year in a row tha cybersecurity protocols made the cut, according to Anne Peterson of McGuireWoods, who'blogged about the OCIE guidance. Here's what Peterson says you have to know:

  • Secure? Prove it: 'Security is no longer an academic discussion and ' OCIE examiners will ask hard questions,' warns Peterson. They'll want to know exactly how security measures work and will demand proof that they protect customers.
  • Assess and Assess Again: 'Periodic risk assessments, with documented benchmarks for success, are now an integral part of verifying compliance with SEC obligations,' Peterson says. OCIE will want to know that new information about cyberattacks is routinely incorporated into existing security programs.
  • Oversight Is Here to Stay: Peterson predicts that the SEC's focus on cybersecurity will continue into 2017. She envisions the 'SEC mandat[ing] that financial firms exchange information regarding cyberattacks to maintain industry awareness of threats to consumer information.'

'


Marlisse Silver Sweeney'writes for'Corporate Counsel, an ALM sibling of'e-Commerce Law & Strategy. Follow her on Twitter'@MarlisseSS.

In 2016, the U.S. Securities and Exchange Commission will remain focused on assessing cybersecurity efforts by investment adviseors and broker-dealers. The agency's Office of Compliance Inspections and Examinations'announced its 'examination priorities' for the year'on Jan. 13 and cybersecurity protocols were once again a top concern. This is the third year in a row tha cybersecurity protocols made the cut, according to Anne Peterson of McGuireWoods, who'blogged about the OCIE guidance. Here's what Peterson says you have to know:

  • Secure? Prove it: 'Security is no longer an academic discussion and ' OCIE examiners will ask hard questions,' warns Peterson. They'll want to know exactly how security measures work and will demand proof that they protect customers.
  • Assess and Assess Again: 'Periodic risk assessments, with documented benchmarks for success, are now an integral part of verifying compliance with SEC obligations,' Peterson says. OCIE will want to know that new information about cyberattacks is routinely incorporated into existing security programs.
  • Oversight Is Here to Stay: Peterson predicts that the SEC's focus on cybersecurity will continue into 2017. She envisions the 'SEC mandat[ing] that financial firms exchange information regarding cyberattacks to maintain industry awareness of threats to consumer information.'

'


Marlisse Silver Sweeney'writes for'Corporate Counsel, an ALM sibling of'e-Commerce Law & Strategy. Follow her on Twitter'@MarlisseSS.

Read These Next
COVID-19 and Lease Negotiations: Early Termination Provisions Image

During the COVID-19 pandemic, some tenants were able to negotiate termination agreements with their landlords. But even though a landlord may agree to terminate a lease to regain control of a defaulting tenant's space without costly and lengthy litigation, typically a defaulting tenant that otherwise has no contractual right to terminate its lease will be in a much weaker bargaining position with respect to the conditions for termination.

How Secure Is the AI System Your Law Firm Is Using? Image

What Law Firms Need to Know Before Trusting AI Systems with Confidential Information In a profession where confidentiality is paramount, failing to address AI security concerns could have disastrous consequences. It is vital that law firms and those in related industries ask the right questions about AI security to protect their clients and their reputation.

Pleading Importation: ITC Decisions Highlight Need for Adequate Evidentiary Support Image

The International Trade Commission is empowered to block the importation into the United States of products that infringe U.S. intellectual property rights, In the past, the ITC generally instituted investigations without questioning the importation allegations in the complaint, however in several recent cases, the ITC declined to institute an investigation as to certain proposed respondents due to inadequate pleading of importation.

Authentic Communications Today Increase Success for Value-Driven Clients Image

As the relationship between in-house and outside counsel continues to evolve, lawyers must continue to foster a client-first mindset, offer business-focused solutions, and embrace technology that helps deliver work faster and more efficiently.

The Power of Your Inner Circle: Turning Friends and Social Contacts Into Business Allies Image

Practical strategies to explore doing business with friends and social contacts in a way that respects relationships and maximizes opportunities.