The Regulator has revised its guidance on cyber security to help trustees and scheme managers meet their duties to assess risk, ensure controls are in place, and respond to incidents.
For the first time, the Regulator is requesting that trustees and scheme providers report (on a voluntary basis) significant cyber incidents as soon as reasonably practicable so the Regulator can build a better picture of the cyber risk facing the industry and its members.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
