SEC Expected to Finalize Cybersecurity Rule Spring 2023 What happened? The U.S. Securities and Exchange Commission’s (SEC) first comprehensive cyber and data security proposal is expected to be finalized in Spring 2023. Firms should expect that they will need to enhance existing cybersecurity programs, particularly if they are not [...]
PTE 2020-02 Retrospective Reviews
Fairview General Counsel Amber Allen Elected to the NSCP Board of Directors Amber Allen, who serves as the General Counsel and Executive Vice President of Fairview®, LLC, was elected to the Board of Directors of the National Society of Compliance Professionals (NSCP) to serve up to a three-year term through [...]
CISA Issues Guidance on Numbers Matching and Phishing-Resistant Multifactor Authentication What happened? The Cybersecurity and Infrastructure Security Agency (“CISA”) published two fact sheets on October 31, 2022, outlining the dangers to accounts and systems when applying specific types of multifactor authentication (MFA). CISA recommends that firms use phishing-resistant MFA [...]
Typosquat Campaign Mimics 27 Brands to Push Windows, Android Malware What happened? A massive typosquat campaign has come to light with over 200 typosquatting domains impersonating 27 brands to push Windows and Android malware. Typosquatting is a method hackers use to impersonate well-known sites by creating fake websites using [...]
SEC Reopens Comment Periods for Cybersecurity, ESG, and More What happened? In a surprising development, the U.S. Securities and Exchange Commission (SEC) announced that they would reopen the comment period on specific rulemaking releases between June 2021 and August 2022. The extension is due to “a technological error that [...]
Cybersecurity Awareness Month: Four Things You Can Do Cyberattacks are now seen as the biggest risk to businesses – outranking COVID-19, economic turmoil, skills shortages, and other issues, according to the Hiscox Cyber Readiness Report 2022. One of the best ways to combat these threats is for organizations to [...]
ESG Considerations for Investment Advisers
Evolving Cybersecurity Expectations: The SEC Proposes its First Comprehensive Cyber and Data Security Rules
The FTC’s Advance Notice of Proposed Rulemaking on Commercial Surveillance and Data Security What happened? On August 22, 2022, the Federal Trade Commission (“FTC”) published an advance notice of proposed rulemaking (“ANPR”) on commercial surveillance and data security practices and requested public comment on regulating the ways that companies [...]