New Cybersecurity Rules for Registered Investment Advisors
… protect their clients’ interests and are promulgated under the Investment Advisers Act of 1940 and the Investment Company Act of 1940. Although there are some existing SEC regulations that touch on cybersecurity, there is no comprehensive set of rules that specifically require firms to adopt and implement broad-based cybersecurity risk management programs. The Proposed RIA Rules contain four broad categories of cybersecurity requirements for firms that are registered or are required to be registered with the SEC: Risk Assessments & Policies/Procedures: The Proposed RIA Rules would require firms to conduct cybersecurity risk assessments, document such assessments in writing, and …
https://www.epicbrokers.com/insights/registered-investment-advisors-new-cybersecurity-rules/