Eversheds Sutherland Cybersecurity and Privacy Insights Blog
content top

Hackers Gonna Hack—FINRA’s Report on Cybersecurity Practices Assists Firms in Responding to Threats

On February 3, 2015 the Financial Industry Regulatory Authority (FINRA) released its long-awaited Report on Cybersecurity Practices, a broad overview of the state of play in the cybersecurity arena for broker-dealers. (Although FINRA has examined only broker-dealers, its Report is helpful for the entire securities industry.) The Report is the culmination of FINRA’s 2014 targeted...

Federal Data Breach Notification Legislative Updates

In the United States, there is no federal law addressing data breach notification obligations that would apply across all sectors. Although legislation has been previously introduced in Congress, none have been enacted into law. With the start of the new Congressional session, Congress and the Obama Administration are continuing efforts to establish a single data breach notification...

SEC Releases Results of 2014 Cybersecurity Exam Sweep

On February 3, the Securities and Exchange Commission (SEC) issued a Risk Alert prepared by its Office of Compliance Inspections and Examinations (OCIE) that summarizes the results of a sweep of more than 100 broker-dealers and investment advisers that OCIE undertook in 2014 in order to assess the level of cybersecurity preparedness of the examined firms. A list of questions that OCIE...

SEC and FINRA Exam Priorities

In their recent examination priorities letters, both the SEC and FINRA highlighted cybersecurity as an area of focus for 2015 exams. In the SEC letter, the Office of Compliance Inspections and Examinations (OCIE) explained that it will continue its 2014 initiative to examine broker-dealers’ and investment advisers’ cybersecurity compliance and controls, and also plans to expand the...

Next Entries »