SEC Publishes Cybersecurity and Resiliency Observations Report
FEBRUARY 6, 2020
The summary of examination observations covers practices and strategies in governance and risk management, access rights and controls, data loss prevention, mobile security, incident response and resiliency, vendor management, and training and awareness. The OCIE report also emphasized the testing and re-evaluation of incident response plans using a variety of methods, such as table top cybersecurity exercises to simultaneously assist in training the organization. The U.S.