ARTICLE · 06 JANUARY 2016

New IIROC Cybersecurity Risk Management Guides – Voluntary?

Dentons Canada LLP

On December 21, 2015, the Investment Industry Regulatory Organization of Canada (IIROC) published two excellent resources to help IIROC-regulated firms address cybersecurity threats.

CanadaPrivacy

Timothy Banks

Author LinkedIn connections

On December 21, 2015, the Investment Industry Regulatory Organization of Canada (IIROC) published two excellent resources to help IIROC-regulated firms address cybersecurity threats. The resources are aimed, in particular, at small and medium-sized securities dealers. Although developed for dealer members of IIROC, the resources are useful for all small and medium-sized enterprises in the extended financial industry. The quality of the guides reflects the fact that IIROC consulted with external experts for their development.

Overview of the Guides

As mentioned, there are two guides: the Cybersecurity Best Practices Guide for IIROC Dealer Members and the Cyber Incident Management Planning Guide for IIROC Dealer Members.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

New IIROC Cybersecurity Risk Management Guides – Voluntary?

Overview of the Guides

Related Articles

Privacy, Data Protection, And Cybersecurity: What Foreign Companies Must Consider Before Entering The Canadian Market

Privacy Class Actions: The Professional Information Exception Under Scrutiny In Québec

Lois sur la protection des renseignements personnels : Faire des affaires au Canada 2026

Les Actualités À Noter Selon Fasken : Protection Des Renseignements Personnels Et Cybersécurité Au Canada, Aux États-Unis Et Dans L’Union Européenne (Septembre 2026)

Fasken’s Noteworthy News: Privacy & Cybersecurity In Canada, The US, And The EU (September 2026)

Read more about

Related Comparative Guides

Data Protection & Cybersecurity

See more popular content from

The Price Of A Data Breach: Target Reaches $10M Settlement In U.S. Privacy Class Action

Canadian Privacy Regulators Publish Findings And Guidance On OpenAI Privacy Compliance

CRTC Releases Guidelines On CASL Consent Records

OPC Issues New PIPEDA Guidance On Assessing Third-Party Service Providers

Quebec's Privacy Law 25: What You Need To Know

Bill C-36 and the Future of Canada’s Federal Private Sector Privacy Law: What Has Changed, What It Means, and What to Do Now

New Rule Clarifies Circumstances Requiring Breach Reporting Under Ontario PHIPA

New Rules For Mandatory Privacy Breach Notification In Canada: What U.S. Organizations Need To Know

Bill C-36: What Businesses Need To Know About The Proposed Privacy Overhaul

Canada’s Privacy Reset: Bill C-36 To Rewrite The Digital Rulebook