Cybersecurity and Risk Insights and Alerts
Cyber risks and threats continue to evolve, and firms are under pressure to meet SEC and FCA expectations for operational resilience as well as their own internal and client expectations for cybersecurity and privacy. Stay current on the latest cybersecurity, privacy, and risk threat and regulatory alerts, and build your cybersecurity and privacy knowledge with insights from our cybersecurity and technology risk experts.
ACA Aponix Cybersecurity Checklist
Cyber alerts and insights
SEC Proposed Rule Includes New 48-Hour Cyber Incident Reporting Requirement
According to the SEC proposed Rule 206(4)-9, RIAs and private funds must now submit a confidential report to the SEC within 48 hours from when a “significant cyber incident” is discovered.
- Cybersecurity
- SEC
SEC Reopens Select Comment Periods After Tech Glitch
The SEC reopened the public comment periods for certain proposed rules due to a technological error earlier this year. We share which proposed rules were affected and should be checked for accurate comment submission.
- SEC
- Compliance
- Cybersecurity
- ESG
Phishing as a Service (PaaS): Cybercriminals Turned Service Providers
Cybercriminals have become service providers offering Phishing as a Service (PaaS) on the dark web, with products such as one-time phishing kits or subscription offers to help others launch multiple attacks for a monthly fee.
- Cybersecurity
- Cybersecurity Resources
Penalizing Pirates: Hackers Push NullMixer Campaigns to Pilfer Data
A recent press release from Kaspersky warns of a malware that can steal users' personal information. We discuss how it works and our guidance for preventing an attack.
- Cybersecurity
Implications of the SEC's Draft Strategic Plan
While the SEC’s draft Strategic Plan does not appear to indicate a directional shift, it does nod toward more aggressive enforcement. Learn how this affects your firm.
- Compliance
- Cybersecurity
SEC Proposed Cybersecurity Risk Rules
The SEC's new proposed cyber rules affect investment advisers, clients of investment advisers, private funds, and investors of private funds.
- Cybersecurity
- SEC