The Securities and Exchange Commission (SEC) has introduced updated cybersecurity risk management rules, initially proposed in February 2022. These regulations, which apply to investment advisers, registered investment companies, and business development companies, require entities categorized as “advisers” and “funds” to comply with enhanced cybersecurity measures.

In 2023, the U.S. Securities and Exchange Commission (SEC) reaffirmed its focus on data security, cybersecurity, and IT operational resilience. The SEC proposed three significant regulatory updates aimed at improving transparency, recordkeeping, and breach reporting across the financial sector.