SEC Cybersecurity Disclosure Rules for Small Advisory Firms
No SEC rule makes an investment adviser report a cybersecurity incident to the Commission or disclose one in a public filing. That rule was proposed in 2022 and withdrawn on June 17, 2025. What your firm still owes is real, though. Client notice under Regulation S-P. A written identity theft program under Regulation S-ID. An … Read more