Cybersecurity and Risk Insights and Alerts
Cyber risks and threats continue to evolve, and firms are under pressure to meet SEC and FCA expectations for operational resilience as well as their own internal and client expectations for cybersecurity and privacy. Stay current on the latest cybersecurity, privacy, and risk threat and regulatory alerts, and build your cybersecurity and privacy knowledge with insights from our cybersecurity and technology risk experts.
ACA Aponix Cybersecurity Checklist
Cyber alerts and insights

AI in UK Financial Services: Unbelievable Potential is Not Without Compliance Risk
The latest joint discussion paper FS2/23 issued by the BoE, FCA, and PRA outlined that the existing UK regulatory frameworks encompass ways in which AI is being used.
- Compliance
- Cybersecurity

SEC Conducts Sweep of AI Use by Investment Advisers
As part of the SEC’s recent focus on AI, the Division of Examinations has initiated a sweep of investment advisers on how AI-based tools are being used by the firms.
- Compliance
- Cybersecurity

Three Eras of Cybersecurity Portfolio Oversight
Cybersecurity oversight of portfolio companies is continually evolving to meet new risks. Three eras can be roughly defined based on different approaches that have been adopted.
- Cybersecurity

Thousands of Servers Exposed By Citrix Bleed Vulnerability
What is Citrix Bleed? Citrix Bleed (CVE-2023-4966) is a critical vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway appliances. It is now being targeted by the Russian ransomware gang, LockBit.
- Cybersecurity

13 Actions to Position Your Portfolio for Cyber Success
Based on our industry expertise and experience, we’ve put together 13 steps to form a programmatic approach to cybersecurity portfolio oversight.
- Cybersecurity
- Cybersecurity Resources

The New York State Department of Financial Services Expands Cybersecurity Rules
The NYDFS recently updated its regulations to add strict provisions on board oversight, ransomware payments, and event reporting.
- Cybersecurity