The U.S. Securities and Exchange Commission is looking at extending cyber risk management rules to third-party providers and requiring more public company disclosure when there is a security breach. These rules could extend to registered firms’ third-party providers such as index providers, custodians, fund administrators and others.
Security Matters: A £3.07M Wake-Up Call for Data Processors
On 26 March 2025, the Information Commissioner’s Office (ICO) announced a substantial fine