Lessons From SEC’s First Cybersecurity Enforcement Action
This week, the SEC fined investment advisory firm R.T. Jones Capital Equities Management for failing to establish required cyber-security policies and procedures, which later led to a breach that compromised the personal data of roughly 100,000 customers. It is the first enforcement action the SEC has brought against a regulated ...
Related articles
-
Article
Frustrating Risk With the Right Internal Control Framework
Image: As cyber-security and IT controls rise up the priority list in corporate audits, a new wrinkle is emerging: numerous frameworks (COSO, NIST, CoBIT) used by numerous parties, all trying to build effective control systems. That could lead to painful detours in mapping controls, if compliance executives don’t plan carefully. ...
-
OpinionWhy the EU’s new Machinery Regulation is a wake-up call on cybersecurity
The European manufacturing industry is on the cusp of a regulatory shift that promises to reshape how machines are designed and operated.
-
News BriefSEC exam priorities for 2026 signal heightened focus on firmwide compliance
The U.S. Securities and Exchange Commission’s (SEC) Division of Examinations released its 2026 examination priorities, which give companies a roadmap of areas of heightened risk and regulatory focus for next year.