Skip to main content

Anonymous On Behalf Of Multiple Small Firms Comment On Regulatory Notice 25-06

Anonymous On Behalf Of Multiple Small Firms

Revise cybersecurity deficiency fines and penalties program. Applying both monetary fines and remedial actions deplete capital available for infrastructure improvements. Instead, negotiate remedial action plan and cost allocations for dedicated investment in their cybersecurity program along with accountability. The fine money has been counterproductive to firms directly improving their firm and investor protection capabilities.