Share on LinkedInShare on LinkedIn

ARTICLE · 13 APRIL 2018

Reporting Cybersecurity Incidents To IIROC

Torys
Torys
Contributor
Torys

Torys

Torys LLP is an international business law firm that works with clients who expect the best advice...

View firm profile
Explore more from Torys

Dealers may soon have to report cybersecurity incidents to IIROC under rule changes proposed on April 5.

CanadaTechnology

Dealers may soon have to report cybersecurity incidents to IIROC under rule changes proposed on April 5.1 Consistent with a heightened global focus on cybersecurity due to the increasing frequency and sophistication of cyber attacks, IIROC believes that information sharing is critical for mitigating cybersecurity risks and promoting the stability of the capital markets. Comments on the proposed rules are due by May 22.

Cybersecurity Incident Reporting

The rule changes would require dealers to submit two reports to IIROC.

  1. A preliminary report within three days of discovering a cybersecurity incident.

This would describe the incident, provide a preliminary assessment of the risk of harm or inconvenience and the impact on the dealer's operations, and explain the immediate mitigating steps that the dealer has taken.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from