The Securities and Exchange Commission (SEC) has released a blueprint explaining how it plans to ensure Wall Street companies are prepared to detect and prevent cyber-attacks, Reuters reports. The document includes example questions the SEC may ask brokerages and financial firms during inspections and warns firms should be ready to disclose a comprehensive list of when they’ve detected malware, undergone a denial-of-service attack or discovered a breach after January 2013. Former SEC Chief of Internet Enforcement John Reed Stark said the list of questions is unusual but “forward-thinking.” He added, “With the public disclosure of this questionnaire, the SEC is giving up the surprise of one aspect of their exam program and opting to provide to SEC-registered financial firms a rare chance to prepare.”
Full Story