View Rule

The Division is considering recommending that the Commission adopt rules to enhance fund and investment adviser disclosures and governance relating to cybersecurity risks. The Commission proposed new rules to require registered investment advisers (advisers”) and investment companies (funds”) to adopt and implement written cybersecurity policies and procedures reasonably designed to address cybersecurity risks. The Commission also proposed a new rule and form under the Advisers Act to require advisers to report significant cybersecurity incidents affecting the adviser, or its fund or private fund clients, to the Commission. With respect to disclosure, the Commission proposed amendments to various forms regarding the disclosure related to significant cybersecurity risks and cybersecurity incidents that affect advisers and funds and their clients and shareholders. Finally, the Commission proposed new recordkeeping requirements under the Advisers Act and Investment Company Act.