For updates and guidance related to COVID-19 / Coronavirus, click here.

Cybersecurity

Given the evolving nature, increasing frequency, and mounting sophistication of cybersecurity attacks – as well as the potential for harm to investors, firms, and the markets – cybersecurity practices are a key focus for firms and FINRA. 

FINRA evaluates firms’ approaches to cybersecurity risk management through reviews of their controls in areas including: technology governance, risk assessment, technical controls, access management, incident response, vendor management, data loss prevention, system change management, branch controls and staff training.  Through these reviews, FINRA also assesses a firm’s ability to protect the confidentiality, integrity, and availability of sensitive customer information.

These pages are designed to assist a firm in building out its cybersecurity program by addressing the individual risks and discussing related controls needed to protect customer and firm confidential data.  FINRA has updated this Cybersecurity page to include the following resources:

  • In Case Of A Disruptive Attack or Breach
  • Common Cybersecurity Threats
  • Events
  • Reports
  • Compliance Tools
  • Media
  • FINRA Cybersecurity Contact

In Case of a Disruptive Attack or Breach

Firms should get to know their local Federal Bureau of Investigation (FBI) and proactively plan for a cybersecurity attack or breach.

In case your firm is the victim of a disruptive attack or breach, for instance your data has been accessed or your customers cannot do business, you should immediately report the incident to your:

Common Cybersecurity Threats

This section highlights some of the common cybersecurity threats faced by broker-dealers. In a number of cases, FINRA has observed that different types of attacks were coordinated and overlapped.

  • Phishing
  • Imposter Websites
  • Malware
  • Account Compromise or Takeover
  • Fraudulent Wires
  • Ransomware
  • Distributed Denial-of-Service (“DDoS”) Attacks
  • Vendor Breaches

Learn more about common cybersecurity threats

Events

2020 Cybersecurity Conference

January 14, 2020 • New York, NY
FINRA’s Cybersecurity Conference helps you stay current on today’s cybersecurity challenges and the ways in which organizations can understand vulnerabilities and threats, and create resilience against cyber attacks.

2019 Small Firm Conference

October 23 – 24, 2019 • Santa Monica, CA
The Small Firm Conference focuses on small firms’ practices and tips for complying with FINRA rules. Don't miss Thursday morning's panel entitled, "Cybersecurity Guidance for Small Firms."

Reports

2018 Report on Selected Cybersecurity Practices is a detailed review of effective information-security controls at securities firms. The report is designed to help broker-dealers – including small firms – further develop their cybersecurity programs. The report addresses areas that firms tend to find most challenging: cybersecurity controls in branch offices; methods of limiting phishing attacks; identifying and mitigating insider threats; elements of a strong penetration-testing program; and establishing and maintaining controls on mobile devices.

2015 Report on Cybersecurity Practices highlights effective practices that firms should consider to strengthen their cybersecurity programs. The observations and practices in the report are based on a variety of sources, including a sweep we conducted in 2014 of firms of varying sizes and business models, a 2011 survey of firms and interviews with other organizations involved in cybersecurity. As we note in the report, there is no one-size-fits-all approach to a cybersecurity infrastructure. Rather, the risk management-based approach that we discuss in the report enables firms to tailor their program to their particular circumstances.

Compliance Tools

Small Firm Cybersecurity Checklist
FINRA has created a Checklist for a Small Firm's Cybersecurity Program to assist small firms in establishing a cybersecurity program.

Compliance Vendor Directory (CVD)
In an effort to provide enhanced compliance tools and resources, FINRA has developed the Compliance Vendor Directory (CVD). The FINRA CVD is designed to give firms more options in locating vendors that provide compliance-related offerings, including cybersecurity vendors and services.

Core Cybersecurity Controls for Small Firms
Core Cybersecurity Controls for Small Firms is a list of core controls that are likely to be relevant to many small firms’ cybersecurity programs. This list was designed to help small firms in establishing an effective cybersecurity program.

Non-FINRA Resources
FINRA has assembled a list of non-FINRA cybersecurity resources that firms may use to manage their cybersecurity risk.

  • Capital Market Insights
    Introducing Greg Ruppert and the National Cause and Financial Crimes Detection Programs
    Between the level of interconnectedness on the web and the sheer about of data available, we’re living in an era ripe for the perpetration of financial fraud. That makes it more important than ever for FINRA to have a holistic view of emerging trends and risks—and the ability to coordinate closely with other regulators and law enforcement. FINRA’s new National Cause and Financial Crimes Detection Programs (NCFC) will be the nerve center to do just that.
    May 26, 2020
  • Virtual Conference Panel
    How to Protect Yourself and Your Firm From Cyberattacks When Working From Home During COVID-19
    Join FINRA staff and industry panelists as they provide examples of effective controls and tools their firms have put into place to monitor and address cybersecurity risks.
    May 19, 2020
  • Guidance
    Observations on Cybersecurity

    While many firms have made significant improvements in their cybersecurity programs, cybersecurity attacks continue to increase in both number and level of sophistication. FINRA notes that such attacks often take advantage of and highlight weaknesses in a firm’s cybersecurity program.

    October 16, 2019
  • Guidance
    Common Cybersecurity Threats

    This article highlights some of the common cybersecurity threats faced by broker-dealers. In a number of cases, FINRA has observed that different types of attacks were coordinated and overlapped.

    July 09, 2019
  • A Few Minutes With FINRA
    A Few Minutes With FINRA: Report on Selected Cybersecurity Practices – 2018
    FINRA’s Senior Vice President of Member Relations and Education Chip Jones, leads a discussion with Chief Information Security Officer John Brady, Senior Director Steve Polansky and Kansas City Surveillance Director Dave Kelley, on FINRA’s 2018 report on selected cybersecurity practices. The discussion includes an overview of the report, which highlights effective practices in five challenging areas that firms should consider to strengthen and further develop their cybersecurity programs—as well as core cybersecurity controls for small firms. (30 min. 17 sec.)
    December 20, 2018
  • Podcast
    Bits & Bytes: A Look at Effective Cybersecurity Practices
    Cybersecurity is a major challenge for everyone – but it can be a particularly big challenge for those in the financial industry. That’s why FINRA released a new report highlighting effective cybersecurity practices for FINRA member firms. Learn more in this episode of FINRA Unscripted.
    December 20, 2018
  • Report / Study
    2018 Report on Selected Cybersecurity Practices

    This report continues FINRA’s efforts to share information that can help brokerdealer firms further develop their cybersecurity programs. Firms routinely identify cybersecurity as one of their primary operational risks. Similarly, FINRA continues to see problematic cybersecurity practices in its examination and risk monitoring program. This report presents FINRA’s observations regarding effective practices that firms have implemented to address selected cybersecurity risks while recognizing that there is no one-size-fits-all approach to cybersecurity.

    December 01, 2018
  • Podcast
    Cybersecurity Awareness Month: Stay Connected and Protected
    In an era when much of our lives happen online, cybersecurity is more important than ever. But what do you do to protect your personal information? We all have a role to play in keeping ourselves secure. This National Cybersecurity Awareness Month, tune in to learn more about how you can keep yourself, your family and your clients safe online.
    October 23, 2018
  • Compliance Tools
    Cybersecurity Checklist

    Protecting investors means protecting their data, too. Our Small Firm Cybersecurity Checklist supports small firms in establishing a cybersecurity program to:

    July 12, 2018
  • Podcast
    Combatting Cybersecurity Threats
    From banking and investing to social media and shopping, the internet is an essential part of our daily lives. That means cybersecurity is more important than ever. That is particularly true for FINRA, which can process up to 99 billion records in a single day. Here, John Brady explains how FINRA stays cyber secure.
    February 27, 2018
  • Video
    Cybersecurity Experts Gather for FINRA Conference
    Cybersecurity experts and regulators gathered in New York City on February 22, 2018 to focus on key ways the financial services industry can maintain cybersecurity.
    February 26, 2018
  • 2017 Exam Findings Report
    Cybersecurity
    Cybersecurity is one of the principal operational risks facing broker-dealers. Recent revelations regarding successful attacks at a number of different entities underscore the need for firms to be vigilant in addressing cybersecurity threats.
    December 01, 2017
  • Compliance Tools
    Non-FINRA Cybersecurity Resources
    FINRA has assembled a list of resources that firms may use to manage their cybersecurity risk. These resources include: news and analysis; effective practices and guidance; and free diagnostic tools...
    October 25, 2016
  • Compliance Tools
    Small Firm Cybersecurity Checklist
    FINRA has created a checklist to assist small firms in establishing a cybersecurity program.
    May 23, 2016
  • Targeted Examination Letter
    Targeted Examination Letter on Cybersecurity
    FINRA is conducting an assessment of firms’ approaches to managing cyber-security threats. FINRA is conducting this assessment in light of the critical role information technology (IT) plays in the securities industry, the increasing threat to firms’ IT systems from a variety of sources, and the potential harm to investors, firms, and the financial system as a whole that these threats pose.
    January 01, 2014
  • Investor Education
    5 Tips to Stay Safe Online This National Cybersecurity Awareness Month
    These days, so much of our lives happen online. That makes cybersecurity more important than ever before. This National Cybersecurity Awareness Month, we’ve got five tips to help to stay safer and more secure online.
  • Investor Alert
    Keeping Your Account Secure: Tips for Protecting Your Financial Information
    Your brokerage firm has an obligation to safeguard your personal financial information. And every investor should take time to understand their firm’s cybersecurity procedures. But even the best procedures cannot prevent all instances of identity theft—especially if the vulnerability lies with you, the customer. Here are critical steps you can take to safeguard your financial accounts and help prevent identity theft.
  • Investor Alert
    Cybersecurity and Your Brokerage Firm
    Information technology (IT) plays a critical role in the securities industry. Unfortunately, cyber threats to the information and computer systems of brokerage firms are increasing, and with these threats comes the risk of potential harm to investors.
  • Investor Alert
    "Phishing" and Other Online Identity Theft Scams: Don't Take the Bait
    FINRA is updating this Alert to tell you about some of the latest online identify theft scams targeting financial sector customers and to provide tips for spotting and avoiding these scams.
  • Investor Alert
    Email Hack Attack? Be Sure to Notify Brokerage Firms and Other Financial Institutions
    FINRA has received an increasing number of reports involving investor funds being stolen by fraudsters who first gain access to the investor’s email account and then email instructions to the firm to transfer money out of the brokerage account. In addition to issuing a Regulatory Notice to firms, we are issuing this Alert to warn investors about the potential financial consequences of a compromised email account and to provide tips for safeguarding your assets.
  • Investor Alert
    Beware of Online Job Classifieds Used to Steal Your Identity
    In another variation of the identity theft tale, stock traders posing as employees of a made-up Latvian brokerage firm appear to have stolen personal information from individuals who thought they were applying for a job through the popular classifieds website, Craigslist (www.craigslist.org).
  • Investor Alert
    Protect Your Online Brokerage Account: Safety Should Come First When Logging In and Out
    The Internet and, more recently, wireless technology have made it easy for investors to check brokerage account information and initiate investment transactions on the go. We are issuing this Alert to warn investors to take precautions to help ensure the security of their brokerage accounts. Not doing so puts your account information and investments at risk.
  • Investor Education
    Safeguarding Your Financial Information: An Identity Theft Prevention Checklist
    Use this checklist to safeguard your sensitive information and help keep identity thieves at bay.