SEC Issues IM Guidance Update on Cybersecurity

The SEC Division of Investment Management ("IM") issued an IM Guidance Update that discusses a number of measures to be considered by funds and advisers when addressing cybersecurity risk.

The measures recommended by the Guidance Update include:

  • conducting periodic assessments of the information collected by the firm, as well as internal and external cybersecurity threats to the firm's information and technology systems;
  • creating a strategy that is designed to prevent, detect and respond to cybersecurity threats; and
  • implementing that strategy through written policies, procedures and training that provides guidance to officers and employees.

See: IM Guidance Update.

Tags