ELTENI'S CYBER SCOOP Latest News In this newsletter, we highlight the SEC’s rule amendments to Regulation S-P as well as the importance of prompt reporting of cyber incidents. REGULATORY CORNER SEC Adopts Rule Amendments to Regulations S-P to Enhance Protection of Customer Information The amendments require covered institutions to develop, implement, and maintain written policies
ELTENI'S CYBER SCOOP Latest News In this newsletter, we highlight the challenges with enforcement of reporting rules. The transfer of responsibility for data management and security. Cyber risks affecting some of the largest technology providers (Microsoft, Palo Alto and Dropbox). REGULATORY CORNER Cybersecurity and Infrastructure Security Agency (CISA) faces resource challenge in implementing cyber reporting
ELTENI'S CYBER SCOOP Latest News In this newsletter, we highlight the regulatory emphasis on documentation and reporting, the requirement for and potential impact of third-party risk management and putting security on the boardroom agenda. REGULATORY CORNER CISA Proposed Cyber Incident Reporting Requirement covers a wider range of entities The U.S. Department of Homeland Security’s (DHS)
ELTENI'S CYBER SCOOP Latest News In this newsletter, we highlight the Compliance issues with the SEC’s rule on material incident disclosure, The Department of Justice's continued efforts to combat the exploitation of widespread vulnerabilities and the increased sophistication of deepfake cyber incidents. REGULATORY CORNER Companies are not complying with the new SEC cybersecurity incident rule
ELTENI'S CYBER SCOOP Latest News In this newsletter, we highlight the FINRA regulatory oversight report, law enforcement continuing their crackdown on cyber criminals and the impact of Artificial Intelligence on cybersecurity. REGULATORY CORNER FINRA Publishes 2024 Regulatory Oversight Report In January, FINRA published their 2024 Annual Regulatory Oversight Report, which was formally known as the
ELTENI'S CYBER SCOOP Latest News In this newsletter, we uncover an SEC Director’s op-ed on disclosure rules. A major international cybersecurity crackdown by law enforcement. The SEC op-ed on disclosure rules. REGULATORY CORNER SEC Director of Corporation Finance weighs in on Cybersecurity Disclosures Rules The Director of the SEC’s Division of Corporation Finance provided his
ELTENI'S CYBER SCOOP Latest News In this newsletter, we uncover additional regulatory rules being approved for Clearing Agencies. Also, the numbers are in, and enforcement actions are up, including SEC settled charges against a broker-dealer and a software company for allegedly providing misleading information regarding cyber incidents. Lastly, the proposed cybersecurity rules for RIAs
ELTENI'S CYBER SCOOP Latest News In this newsletter, we uncover a major cybersecurity revelation. The SEC has taken action against SolarWinds Corporation and its CISO, Timothy G. Brown, for alleged fraud and internal control lapses tied to cybersecurity risks. Want to download this in pdf? Enter the password from the email you received.
LastPass, a popular password management service, has revealed that malicious actors have gained access to unencrypted customer data, including web URLs, email addresses, company names, billing addresses, telephone numbers, and IP addresses of LastPass customers, as well as encrypted copies of customer password vaults. This information was compromised using previously stolen data from a breach in
On July 29, 2022, the New York Department of Financial Services (NYDFS) provided several potential enhancements to the existing Part 500 Cybersecurity Rules. The Draft Amendments can be divided into six categories: Assessments, Technical Requirements, Governance, Obligations for Larger Companies, Notifications, and Penalties. Assessments The Draft Amendments expand the current definition of Risk Assessment to
