FINANCIAL

Banks, broker-dealers, and investment advisers sit here. US regulators run the show — SEC cyber disclosure, FFIEC guidance, the FTC Safeguards Rule, GLBA, and NYDFS Part 500 — and attention is triggered by a "material" cyber incident under the SEC 8-K Item 1.05 four-business-day clock, an operational outage that disrupts a regulator-reportable service, or a vendor concentration finding in a SOC 2 attestation.

/financial