Security

SEC: Cybersecurity Matters

Cybersecurity remains a priority in the SEC’s 2025 exam agenda: The Division continues to emphasize cybersecurity practices to safeguard customer records and information. Specific focus areas include policies, governance, data loss prevention, access controls, account management, and responses to incidents ...

Why Your Firm Needs a Business Continuity and Disaster Recovery Plan

Even on a good day, being a firm owner is challenging. Apart from dealing with and effectively solving multiple problems, you also need the foresight to arm your organization with the right tools and solutions to tackle any issues that ...

Data Loss Disasters Come in Many Forms

Data loss disasters come in many forms, ranging from full-scale natural calamities to cyberattacks and even simple human errors. Disasters can bring organizations to a grinding halt. Apart from financial and reputational damage, failing to protect valuable data can also ...

It Can Happen To You: A Hacked RIA

“It wouldn’t happen to me, I’m too small.” Fortunately, I don’t hear that as often as I used to, but I still hear it. It’s not true.  I looked up a big breach on the dark web last weekend perpetrated ...

Where Have The SEC Cyber Security Rules Gone?

The Silence Is Deafening It’s September as we write this and the SEC hasn’t announced anything notable on the Cybersecurity Rule for RIAs – will they?  At this point we think one of two things is most likely, (1) the ...

WordPress Plugin Alert: Critical Vulnerability in LiteSpeed Cache

In a recent security alert, the widely used LiteSpeed Cache plugin for WordPress has been found to have a critical vulnerability that could impact millions of websites. Here’s what you need to know: What Is the LiteSpeed Cache Plugin? The LiteSpeed Cache plugin is ...

The SEC Cybersecurity Rule for RIAs: Enforcement & Precedent Matter More Than Ever

This is part of our blog series on the SEC's Proposed Cybersecurity Rule for RIAs, titled "Cybersecurity Risk Management for Investment Advisers, Registered Investment Companies, and Business Development Companies" You can download our ebook on the rule at https://ria.tips/ebook. It seems ...

The SEC Cybersecurity Rule for RIAs: No Alignment

This is part of our blog series on the SEC's Proposed Cybersecurity Rule for RIAs, titled "Cybersecurity Risk Management for Investment Advisers, Registered Investment Companies, and Business Development Companies" You can download our ebook on the rule at https://ria.tips/ebook. We've gone ...

How to Safely Share Passwords with Employees

If you ask a security professional, you get by-the book advice about sharing passwords: “Don’t share passwords.” But we know, in reality, that doesn’t work. Your office might be sharing a single password for apps like SurveyMonkey right now to ...

MGM taken down, Caesars paid up

In September MGM Casinos and Hotels suffered a massive cyberattack. WSJ reported: “ I saw employees armed with clipboards and pens everywhere. It was the strangest sight I’ve seen since MGM installed those handwashing stations… tables were filled with binders ...

Contact

CyberSecureRIACyberSecureRIA Logo $$$

2024 And 2025 Finalist