Judge Engelmayer’s 107-page dismissal of most of the U.S. Securities and Exchange Commission (SEC)’s claims against SolarWinds provides valuable guidance, and some comfort, for public companies and Chief Information Security...more
8/19/2024
/ Chief Information Security Officer (CISO) ,
Corporate Counsel ,
Cyber Attacks ,
Cybersecurity ,
Disclosure Requirements ,
Fraud ,
Internal Controls ,
Misrepresentation ,
Negligence ,
Ransomware ,
Scienter ,
Securities and Exchange Commission (SEC) ,
Securities Exchange Act ,
SolarWinds
Key Takeaways -
With the SolarWinds enforcement action, the SEC continues to ratchet up its enforcement against companies that fail to properly disclose their cybersecurity incidents and risks. By naming the SolarWinds CISO...more
11/22/2023
/ Chief Information Security Officer (CISO) ,
Cyber Attacks ,
Cyber Incident Reporting ,
Cybersecurity ,
Disclosure Requirements ,
Enforcement Actions ,
Fraud ,
Incident Response Plans ,
Popular ,
Risk Assessment ,
Securities and Exchange Commission (SEC) ,
SolarWinds
Investment Advisers: Assessing Risks, Scoping Examinations, and Requesting Documents*
I. Introduction -
The SEC-registered investment adviser (“adviser”) population is large and diverse, ranging from global asset managers...more
9/12/2023
/ Audits ,
Brokerage Accounts ,
Business Operations ,
Compliance ,
Cybersecurity ,
Disclosure Requirements ,
Ethics ,
Financial Records ,
Insider Trading ,
Internal Controls ,
Investment Adviser ,
Marketing ,
Policies and Procedures ,
Risk Alert ,
Risk Management ,
Securities ,
Securities and Exchange Commission (SEC) ,
Trading Platforms ,
Valuation
On Tuesday, February 7, the Division of Examinations of the U.S. Securities and Exchange Commission released its 2023 Examination Priorities. Private fund sponsors and managers should pay attention to the Priorities for two...more
Key Points -
Proposed amendments bolster cyber disclosure and incident reporting requirements to better inform investors about a company’s risk management, strategy and governance relative to cyber issues.
Under the...more
Key Points -
Proposed amendments bolster cyber disclosure and incident reporting requirements to better inform investors about a company’s risk management, strategy and governance relative to cyber issues. ...more
The New Year Brings a New Enforcement Focus on Emerging Technology -
In 2021, newly confirmed members of the Biden administration set the stage for increased enforcement activity, surging resources to investigations and...more
Gary Gensler, Chair of the U.S. Securities and Exchange Commission (SEC), signaled a new era of cybersecurity law (and accompanying enforcement) in his keynote address “Cybersecurity and Securities Laws” on January 24, 2022,...more
Key Points -
On October 6, 2021, the DOJ announced two new initiatives: the Civil Cyber-Fraud Initiative and the National Cryptocurrency Enforcement Team.
The Civil Cyber-Fraud Initiative will fight rising cyber threats...more
10/13/2021
/ Cryptocurrency ,
Cyber Incident Reporting ,
Cybersecurity ,
Cybersecurity Maturity Model Certification (CMMC) ,
Department of Defense (DOD) ,
Department of Justice (DOJ) ,
DFARS ,
False Claims Act (FCA) ,
Federal Acquisition Regulations (FAR) ,
Homeland Security Cybersecurity & Infrastructure Security Agency (CISA) ,
NDAA ,
Popular ,
Supply Chain
On August 30, 2021, the Securities and Exchange Commission announced three enforcement actions against registered investment advisers for alleged cybersecurity failures involving cloud-based email systems. All three actions...more
- The OCIE of the SEC highlights that responses to COVID-19 present important regulatory and compliance issues for SEC registrants, including “heightened risks of misconduct” tied to recent market volatility.
- The Risk...more
8/21/2020
/ Asset Management ,
Broker-Dealer ,
Business Continuity Plans ,
Business Operations ,
Compliance ,
Conflicts of Interest ,
Coronavirus/COVID-19 ,
Cybersecurity ,
Data Protection ,
Fees ,
Financial Transactions ,
Investment Adviser ,
Investment Fraud ,
Investment Management ,
Investors ,
OCIE ,
Personally Identifiable Information ,
Policies and Procedures ,
Popular ,
Remote Working ,
Risk Alert ,
Securities and Exchange Commission (SEC) ,
Supervision
- In the age of broad corporate teleworking brought on by COVID-19, OCIE of the SEC has observed during recent examinations that investment advisers, broker-dealers and investment companies are subject to an increased threat...more
7/16/2020
/ Broker-Dealer ,
Cyber Attacks ,
Cybersecurity ,
Data Breach ,
Financial Services Industry ,
Homeland Security Cybersecurity & Infrastructure Security Agency (CISA) ,
Incident Response Plans ,
Investment Management ,
Malware ,
OCIE ,
Popular ,
Ransomware ,
Risk Alert ,
Securities and Exchange Commission (SEC)
- Market participants should review and assess their compliance procedures to prevent and detect insider trading risks associated with COVID-19.
- Companies should increase their vigilance regarding cybersecurity threats...more
4/1/2020
/ CFTC ,
Coronavirus/COVID-19 ,
Cybersecurity ,
Department of Justice (DOJ) ,
Enforcement Actions ,
Financial Crimes ,
Insider Trading ,
Investors ,
Phishing Scams ,
Pump and Dump ,
Securities and Exchange Commission (SEC) ,
Securities Fraud ,
U.S. Treasury ,
Wire Fraud
• On May 23, 2019, the Securities and Exchange Commission’s (SEC) Office of Compliance Inspections and Examinations (OCIE) issued a Risk Alert describing its observations in past examinations of weaknesses and best practices...more
5/29/2019
/ Broker-Dealer ,
Cloud Storage ,
Customer Information ,
Cyber Threats ,
Cybersecurity ,
Data Protection ,
Data Security ,
Data Storage Providers ,
Identity Theft ,
Identity Theft Red Flags Rule ,
Investment Adviser ,
OCIE ,
Policies and Procedures ,
Regulation S-ID ,
Regulation S-P ,
Regulatory Requirements ,
Risk Alert ,
Safeguards Rule ,
Securities and Exchange Commission (SEC) ,
Third-Party Service Provider ,
Vendors
• The SEC released a Risk Alert summarizing key areas in which it continues to see compliance deficiencies related to Regulation S-P, the primary SEC rule regarding privacy notices and safeguard policies of investment...more
4/29/2019
/ Broker-Dealer ,
Customer Information ,
Cybersecurity ,
Data Breach ,
Data Privacy ,
Data Security ,
Employee Training ,
Incident Response Plans ,
Investment Adviser ,
Notice Requirements ,
OCIE ,
Opt-Outs ,
Personally Identifiable Information ,
Policies and Procedures ,
Popular ,
Privacy Policy ,
Regulation S-P ,
Risk Alert ,
Safeguards Rule ,
Securities and Exchange Commission (SEC) ,
Vendors
• On December 14, the SEC’s OCIE issued a Risk Alert summarizing the findings of its limited-scope examination initiative relating to electronic messaging.
• Noting a “pervasive use” of electronic messaging by adviser...more
12/18/2018
/ Best Practices ,
Books & Records ,
Bring Your Own Device (BYOD) ,
Cybersecurity ,
Electronic Communications ,
Email Policies ,
Employee Training ,
Investment Adviser ,
Investment Advisers Act of 1940 ,
New Guidance ,
OCIE ,
Policies and Procedures ,
Recordkeeping Requirements ,
Risk Alert ,
Risk Mitigation ,
Securities and Exchange Commission (SEC) ,
Text Messages
• The SEC issued guidance in the form of a rare “21(a) report” this week after investigating a series of email frauds impacting 9 unnamed companies.
• These email-based frauds, referred to as “CEO scams” or “vendor scams,”...more
10/19/2018
/ Accounting Controls ,
Business E-Mail Compromise (BEC) ,
CEOs ,
Corporate Finance ,
Cyber Crimes ,
Cybersecurity ,
Data Breach ,
Email ,
Enforcement Actions ,
Internal Controls ,
New Guidance ,
Policies and Procedures ,
Popular ,
Publicly-Traded Companies ,
Scams ,
Securities and Exchange Commission (SEC) ,
Securities Exchange Act ,
Spoofing ,
Wire Fraud
In the perennial quest for alpha, investment managers have turned increasingly to big and alternative data for market insights. The most prominent consumers of this data on Wall Street are managers of ‘‘quant’’ funds, which...more
3/20/2018
/ Algorithms ,
Asset Management ,
Best Practices ,
Big Data ,
Breach of Duty ,
Cybersecurity ,
Hedge Funds ,
Insider Trading ,
Investment Management ,
Material Nonpublic Information ,
Popular ,
Professional Liability ,
Risk Mitigation ,
Scienter ,
Tippees ,
Tippers ,
Vendors