The priorities fall into several core themes: conduct, fiduciary standard, compliance program effectiveness, technology, operational resilience, and cybersecurity.
SEC Reg S-ID
Enforcement
Premium
M Holdings to pay $325K for cybersecurity lapses that compromised email accounts
The SEC said the firm did not maintain comprehensive information security policies despite being aware of significant gaps in protection.
The 2026 priorities carry forward many of the themes from 2025, but the tone has shifted from early groundwork to more stringent expectations.
Emerging risk areas (such as AI), plus cybersecurity, crypto and AML in focus as we dig deep into Examination Priorities document.
Enforcement
Premium
Ceros Financial fined for lacking supervision over personal email for business use
FINRA ruling notable due to inclusion of Identity Theft Red Flags Rule.
Disciplinary decisions issued February 10 – 16, 2024.
Gurbir Grewal set out the Division of Enforcement's five guiding principles.