Cybersecurity: Time’s Up!

Social engineering and ransomware continue to top the list of cybersecurity threats, according to the 2016 Verizon Data Breach Investigations Report released a few weeks ago. Alarmingly, the report shows the amount of time to compromise and exfiltrate data is measured in seconds and minutes for 28.3% of cyberattacks.
Time is of the essence when a potential incident occurs. When you have mere seconds to make a decision on how to contain and mitigate an attack, it is critical to have a robust incident response plan in place and to test it periodically to ensure that all staff know their roles and responsibilities.

Ascendant has created incident response plans for advisers of various shapes and sizes, and a key element to each one has been establishing clear lines for reporting and prompt escalation. I am thrilled that we will be featuring an interactive incident response planning session at our upcoming national compliance conference in San Diego, California in September 2016.  Even firms who have adopted a solid incident response plan can benefit from incident response planning exercises – because the change in a single fact may alter the course of action you should take. But don’t take my word for it. As Verizon’s annual data breach report states, you have time. Three minutes and 45 seconds, to be exact.*

(*Median time from when a social engineering test is conducted to when the first recipient clicks to open the would-be malicious attachment).

Related Content

Latest Content

OCIE Examined 15% of RIAs in 2017

In 2017, the SEC examined 2,114 investment advisers, approximately 15 percent of the 14,000+ registered investment advisers, the SEC confirmed in its Fiscal Year 2019 Congressional Budget Justification Annual Performance Plan. In the same report, the SEC said the staff will continue to improve its efforts of RIAs, noting that nearly 35 percent of all … Continued

Ascendant’s Adam DiPaolo Discusses Hypothetical & Model Performance Marketing Pitfalls

A Jan. 12 article in HFMCompliance titled “Best practice for hedge funds using hypothetical and model performance” outlines best practices for hedge fund managers when using hypothetical performance or model data in marketing efforts, and how managers relying on such data can avoid enforcement actions. Adam DiPaolo, Senior Consultant in Ascendant’s Private Funds group, is quoted in the … Continued

SEC’s Exam Priorities Offer Insight Into National Exam Program

On February 7, 2018, the SEC’s Office of Compliance Inspections and Examinations (“OCIE”) issued their 2018 Examination Priorities (see Ascendant’s summary here). In addition to defining their examination priorities for the year, the OCIE staff offered some insight into the National Exam Program.  Specifically, they defined the following five principles in executing their exam priorities: … Continued

SEC Updates: ICO Gatekeeper Standards, SEC/CFTC Swap Rules

SEC Chairman Jay Clayton had some stern advice for market professionals, especially gatekeepers, who he said need to act responsibly and hold themselves to high standards. Speaking via videoconference during Securities Regulation Institute’s recent annual conference, he said, “To be blunt, from what I have seen recently, particularly in the initial coin offering (“ICO”) space, they … Continued

Mailing List

Subscribe to the Ascendant Compliance email list for the latest compliance resources, conferences, ComplianceCasts™, and more.

Loading form...

Contact Us

Ascendant works together with clients to identify and assess critical needs through customized plans. If you need assistance with compliance functions, regulatory services, cybersecurity or technology tools, we’d love to speak with you.