IIROC Provides Additional Guidance On Proactive Management Of Cyber-related Risks

On January 18, 2018, the Investment Industry Regulatory Organization of Canada (IIROC) released its Compliance Priorities Report for 2017/2018, identifying cybersecurity as a "high priority" issue that IIROC dealer members should address to improve investor protection and foster market integrity. The report also provides specific guidance on initiatives that dealers may undertake in 2018-19 to proactively manage cyber-related risks.

IIROC's 2016/2017 Feedback

In 2017, IIROC followed up with small and mid-sized dealers to discuss how they had considered IIROC's previous feedback that dealers should:

• maintain "adequate" policies and procedures to safeguard the confidentiality, integrity and availability of the dealer's data (including clients' personal information);