Law.com Subscribers SAVE 30%

Call 855-808-4530 or email [email protected] to receive your discount on a new subscription.

<b><i>Online Extra:</b></i> SEC to Focus on Cybersecurity Compliance in 2016

By Marlisse Silver Sweeney
January 26, 2016

In 2016, the U.S. Securities and Exchange Commission will remain focused on assessing cybersecurity efforts by investment adviseors and broker-dealers. The agency's Office of Compliance Inspections and Examinations'announced its 'examination priorities' for the year'on Jan. 13 and cybersecurity protocols were once again a top concern. This is the third year in a row tha cybersecurity protocols made the cut, according to Anne Peterson of McGuireWoods, who'blogged about the OCIE guidance. Here's what Peterson says you have to know:

  • Secure? Prove it: 'Security is no longer an academic discussion and ' OCIE examiners will ask hard questions,' warns Peterson. They'll want to know exactly how security measures work and will demand proof that they protect customers.
  • Assess and Assess Again: 'Periodic risk assessments, with documented benchmarks for success, are now an integral part of verifying compliance with SEC obligations,' Peterson says. OCIE will want to know that new information about cyberattacks is routinely incorporated into existing security programs.
  • Oversight Is Here to Stay: Peterson predicts that the SEC's focus on cybersecurity will continue into 2017. She envisions the 'SEC mandat[ing] that financial firms exchange information regarding cyberattacks to maintain industry awareness of threats to consumer information.'

'


Marlisse Silver Sweeney'writes for'Corporate Counsel, an ALM sibling of'e-Commerce Law & Strategy. Follow her on Twitter'@MarlisseSS.

In 2016, the U.S. Securities and Exchange Commission will remain focused on assessing cybersecurity efforts by investment adviseors and broker-dealers. The agency's Office of Compliance Inspections and Examinations'announced its 'examination priorities' for the year'on Jan. 13 and cybersecurity protocols were once again a top concern. This is the third year in a row tha cybersecurity protocols made the cut, according to Anne Peterson of McGuireWoods, who'blogged about the OCIE guidance. Here's what Peterson says you have to know:

  • Secure? Prove it: 'Security is no longer an academic discussion and ' OCIE examiners will ask hard questions,' warns Peterson. They'll want to know exactly how security measures work and will demand proof that they protect customers.
  • Assess and Assess Again: 'Periodic risk assessments, with documented benchmarks for success, are now an integral part of verifying compliance with SEC obligations,' Peterson says. OCIE will want to know that new information about cyberattacks is routinely incorporated into existing security programs.
  • Oversight Is Here to Stay: Peterson predicts that the SEC's focus on cybersecurity will continue into 2017. She envisions the 'SEC mandat[ing] that financial firms exchange information regarding cyberattacks to maintain industry awareness of threats to consumer information.'

'


Marlisse Silver Sweeney'writes for'Corporate Counsel, an ALM sibling of'e-Commerce Law & Strategy. Follow her on Twitter'@MarlisseSS.

Read These Next
The DOJ's Corporate Enforcement Policy: One Year Later Image

The DOJ's Criminal Division issued three declinations since the issuance of the revised CEP a year ago. Review of these cases gives insight into DOJ's implementation of the new policy in practice.

Use of Deferred Prosecution Agreements In White Collar Investigations Image

This article discusses the practical and policy reasons for the use of DPAs and NPAs in white-collar criminal investigations, and considers the NDAA's new reporting provision and its relationship with other efforts to enhance transparency in DOJ decision-making.

The DOJ's New Parameters for Evaluating Corporate Compliance Programs Image

The parameters set forth in the DOJ's memorandum have implications not only for the government's evaluation of compliance programs in the context of criminal charging decisions, but also for how defense counsel structure their conference-room advocacy seeking declinations or lesser sanctions in both criminal and civil investigations.

CLE Shouldn't Be the Only Mandatory Training for Attorneys Image

Each stage of an attorney's career offers opportunities for a curriculum that addresses both the individual's and the firm's need to drive success.

A defendant in a patent infringement suit may, during discovery and prior to a <i>Markman</i> hearing, compel the plaintiff to produce claim charts, claim constructions, and element-by-element infringement analyses.