In December 2018, the United States Financial Industry
Regulatory Authority issued a Report on Selected Cybersecurity Practices —
2018 to help broker-dealer firms improve their
cybersecurity programs. The Report provides detailed
recommendations for managing common cyber risks, and includes a
list of core cybersecurity controls for small firms. The Report
provides guidance that is consistent with best practices
recommended by Canadian financial industry regulators,
self-regulatory organizations and privacy commissioners, and is
useful for organizations in all industries.
FINRA AND CYBERSECURITY
The Financial
Industry Regulatory Authority (FINRA) is an independent,
self-regulatory organization for broker-dealer firms doing business
in the United States. FINRA is authorized by the United States
Congress to protect American investors by making sure the
broker-dealer industry operates fairly and honestly.