Canadian Securities Administrators - Update On Cybersecurity

The most recent information from CSA on cybersecurity is set out in the summary of its roundtable discussion (released April 7, 2017) to explore response to cybersecurity incidents.

The summary of the roundtable discussion highlighted the following:

• The importance of cooperation and information sharing in response to cybersecurity incidents;
• The need for a robust Incident Response Plan (IRP) for entities, including those indirectly affected by a cyber incident;
  • IRPs should be detailed in order to prepare for a cyber incident.  They should address internal procedures and also outline how to share key information and communicate with other stakeholders.  Communication with others is especially important in case of a market-wide security incident affecting dealers, agencies, and other market participants.