Following the Securities and Exchange Commission (SEC) report on Business Email Compromise (BEC) and its $1M enforcement against a Des Moines-based broker-dealer and investment adviser related to its failures in cybersecurity policies and procedures, organizations received a clear warning the agency is focusing on cybersecurity and will levy additional fines.
However, there are steps firms can take to avoid becoming a target of an SEC action. Alan Brill, Senior Managing Director in our Cyber Risk practice, spoke to Judy Greenwald of Business Insurance and provided some initial guidance in the article below.
Subscription is required to read this article.
The Kroll Investigations, Diligence and Compliance team partners with clients to anticipate, detect and manage regulatory and reputational risks associated with global ethics and compliance obligations.