NFA Cybersecurity Policies and Procedures Now Effective

The NFA reminded member firms that they are required to adopt and enforce written policies and procedures to secure customer data and access to electronic systems. The new requirements became effective on March 1, 2016.

The Cybersecurity Interpretive Notice requires member firms to adopt and enforce (i) written policies and procedures to secure customer data and access to electronic systems and (ii) an information systems security program. The Notice grants firms a degree of flexibility in determining what constitutes "diligent supervision."

Premium Content

Available only to Premium subscribers.

 

Tags