News & Analysis as of October 31, 2024

Investment Adviser

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Top 5 SEC Enforcement Developments for August 2024

Morrison & Foerster LLP on 9/25/2024

Each month, we publish a roundup of the most important SEC enforcement developments for busy in-house lawyers and compliance professionals. This month, we examine: •The SEC’s case against crypto firm Kraken is permitted to...more

Top 5 SEC Developments for July 2023

Morrison & Foerster LLP on 8/15/2023

In order to provide an overview for busy in-house counsel and compliance professionals, we summarize below some of the most important SEC enforcement developments from the past month, with links to primary resources. This...more

Dechert Cyber Bits - Special Edition: 2023 Predictions

Dechert LLP on 12/30/2022

What is in store for Privacy and Cybersecurity in 2023 - As the year ends, we offer this special edition with predictions for 2023 from each member of the Cyber Bits Partner Committee. Regardless of what happens in 2023, we...more

Dechert Cyber Bits - Issue 25

Dechert LLP on 12/16/2022

SEC Division of Examinations Issues Risk Alert on Regulation S-ID and Identity Theft Prevention Programs - On December 5, 2022, the Securities and Exchange Commission (“SEC”) Division of Examinations (“EXAMS”) issued a...more

SEC Proposes New Cybersecurity Reporting and Enhanced Standardized Disclosure

Wilson Sonsini Goodrich & Rosati on 3/17/2022

On March 9, 2022, the U.S. Securities and Exchange Commission (SEC) proposed new rules that would require current and periodic reporting of material cybersecurity incidents as well as more detailed disclosure of cybersecurity...more

SEC Cybersecurity Rules Target Investment Advisers and Investment Companies

Goodwin on 2/11/2022

On February 9, 2022, the U.S. Securities and Exchange Commission (“SEC”) proposed a package of new rules and amendments to enhance cybersecurity preparedness and improve cyber resilience of investment advisers and investment...more

SEC Proposes Changes to Private Fund Regulation

Goodwin on 2/11/2022

In This Issue. The U.S. Securities and Exchange Commission (SEC) proposed changes to private fund regulation; the Office of the Comptroller of the Currency (OCC) succeeded in validating its “valid-when-made” rulemaking; the...more

SEC Issues Cybersecurity Sanctions Against Eight Firms

Balch & Bingham LLP on 9/21/2021

Background - On August 30, 2021, the Securities and Exchange Commission (SEC) sanctioned eight firms in three actions for cybersecurity failures in their policies and procedures that exposed the personal information of...more

SEC Makes Cybersecurity Top Priority; Sanctions Firms for Cybersecurity Failures

Goodwin on 9/16/2021

There is little doubt that the U.S. Securities and Exchange Commission is making cybersecurity a top priority. SEC Chair Gary Gensler told a Senate committee on Tuesday, September 14, 2021 that the agency is developing a...more

SEC “Sweep” of Public Companies’ & Registrants’ Responses to the SolarWinds Cyberbreach

Faegre Drinker Biddle & Reath LLP on 6/24/2021

As publicly reported late last week, the Securities and Exchange Commission’s Division of Enforcement (SEC) sent voluntary requests for information to a range of public companies and investment firms seeking voluntary...more

OCIE Issues Second Cybersecurity Risk Alert of Q3-2020

Kilpatrick on 10/14/2020

On September 15, 2020, the SEC’s Office of Compliance Inspections and Examinations (“OCIE”) issued a cybersecurity risk alert highlighting the increased use of “credential stuffing” attacks against investment advisers and...more

OCIE Warns of Increased ‘Credential Stuffing’ Cyberattacks on Investment Advisers, Broker-Dealers

Kramer Levin Naftalis & Frankel LLP on 10/1/2020

The Securities and Exchange Commission’s (SEC) Office of Compliance Inspections and Examinations (OCIE) has published a risk alert, warning SEC-registered investment advisers, brokers and dealers about the increasing use of...more

OCIE Issues Cybersecurity Risk Alert on the Risk of Credential Stuffing Attacks

Dechert LLP on 9/28/2020

The Risk Alert makes clear that OCIE has observed an increase in the frequency of credential stuffing attacks against Registrants, including some successful credential stuffing attacks that resulted in the loss of customer...more

SEC Issues New Risk Alert on “Credential Stuffing” Attacks

Faegre Drinker Biddle & Reath LLP on 9/18/2020

On September 15, 2020, the SEC’s Office of Compliance Inspections and Examinations (OCIE) issued a Risk Alert highlighting the recent uptick in “credential stuffing” cyber-attacks against SEC-registered investment advisors...more

SEC Encourages Enhanced Data Security in Wake of Increasingly Sophisticated Ransomware Attacks Following NAIC Brief Encouraging...

BCLP on 7/20/2020

The SEC's Office of Compliance and Examinations (OCIE) issued a risk alert on July 10th about its observation of an apparent increase in sophistication of ransomware attacks on SEC registrants, including broker-dealers,...more