Cybersecurity

Cambridge did not require any other enhanced security measure to prevent similar compromises in the future, such as implementation of multi-factor authentication

The email account takeovers resulted in the exposure of Cetera Entities’ customers’ PII stored in the compromised email accounts. None of the compromised email accounts ...

Fraudulent phishing e-mails purport to be from FINRA

The list continues to grow of areas of interest among SEC examiners

A source shares a copy with RCW of the DOE's 2021 cybersecurity sweep exam

Examiners also wanted to know if the firm has cybersecurity insurance and if it made any claims and what the amount of losses were

Some insurers even maintain cryptocurrency wallets to expedite paying ransoms

“Quite frankly, it’s not if but when these days” that your firm will be hit with a cyber-attack

It is preferable to not allow employees to BYOD (bring their own devices to work), but it’s not realistic in most cases to prevent it

A tell-tale sign would be evidence that a large amount of data has disappeared or been copied to a remote source