At the time the Final Cyber rule for SEC covered market registrants was proposed, a second ruling regulating the cybersecurity risk management of…

← Back to Blog

At the time the Final Cyber rule for SEC covered market registrants was proposed, a second ruling regulating the cybersecurity risk management of Investment advisors, registered investment companies and business development companies (the “adviser cybersecurity rule”) was also proposed.

While the SEC cyber rule for market registrants has been finalized, the cybersecurity rule for ‘Investment advisors, registered investment companies and business development companies’ is pending final release in April 2024. The proposed rule is similar to the SEC final cyber rule requiring covered entities demonstrate oversight, assurance, attestation and reporting of cybersecurity risks, and incidents. (https://lnkd.in/eqSkC9wB).

One waits to see if the SEC releases the final cyber rule for advisers ahead of the expected April deadline. The scope of covered entities is greater than those covered by the SEC market cyber rule, covering much of the trading infrastructure that facilitates the securities market.

It is a further example of the global focus regulators are placing on cybersecurity risk management.

@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Ryan Buckner Bob Dix

Veritas GRC U.S. Securities and Exchange Commission National Society of Compliance Professionals

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7188060669613613056