At the FINRA Annual Conference this year, panelists highlighted trends such as those involving investor scams, Reg S-P, and e-communications.
SEC Reg S-P
The amendments significantly expand expectations around incident response, customer notification, and service provider oversight.
Janaya Moscony and Leigh Wittick spoke to GRIP about how financial institutions can demonstrate compliance with the many components of Reg S-P.
Through its dedicated outreach program the SEC offered small firms the clearest indication yet on how compliance with the 2024 Regulation S-P amendments will be examined.
The Division of Examinations outlined the rule’s historical foundations, the practical approach exam teams will take, and the heightened expectations around vendor oversight and recordkeeping.
Janaya Moscony, president of SEC3 and former SEC regulator, offers top tips and best practice learned in 2025 to navigate a frictionless 2026.
The priorities fall into several core themes: conduct, fiduciary standard, compliance program effectiveness, technology, operational resilience, and cybersecurity.
Enforcement
Premium
M Holdings to pay $325K for cybersecurity lapses that compromised email accounts
The SEC said the firm did not maintain comprehensive information security policies despite being aware of significant gaps in protection.