The Securities and Exchange Commission’s Office of Compliance Inspections and Examinations (OCIE) recently issued its examination observations related to market participants’ cyber-security and operational resiliency practices. The SEC guidance comes the same week the National Security Agency (NSA) released its own guidance on mitigating cloud vulnerabilities.

Jaclyn Jaeger is a freelance contributor to Compliance Week after working for the company for 15 years. She writes on a wide variety of topics, including ethics and compliance, risk management, legal,...