Is Your Firm’s Sensitive Data Protected From a Cyber Attack?

Cyber security readiness has been identified by regulatory and professional bodies such as the SEC, FINRA, New York Department of Financial Services, and AICPA as a critical risk that organizations need to address. Regulatory initiatives have underscored the importance of cyber security preparedness to the integrity of investment markets and customer data protection.

Regulatory Concerns

Cyber security remains one of the key focus areas for regulatory examination. For example, it is critical for SEC-regulated firms to demonstrate their ability to protect sensitive customer information and compliance with:

• Regulation S-P:
  • Firms must adopt written policies and procedures to protect customer information against cyber attacks and other forms of unauthorized access
• Regulation S-ID:
  • Firms have duties for detection, prevention, and mitigation of identity theft
• The Securities Exchange Act of 1934:
  • Firms must preserve electronically-stored records in a non-rewriteable, non-erasable format

Kreischer Miller’s Cyber Security Services

Kreischer Miller’s Cyber Security practice is dedicated to ensuring you have the tools and knowledge to protect your organization in today’s dynamically-changing cyber security landscape. We have developed a series of integrated solutions to help investment managers and advisors address regulatory concerns and manage their cyber risk in a reasonable and prudent manner.

Risk Assessment

A risk assessment identifies, quantifies, and prioritizes system-critical information, procedural, and configuration vulnerabilities.

Penetration Testing

Penetration testing identifies security weaknesses and response capabilities by testing, measuring, and actively exploiting established security measures and applicable policies and procedures.

Social Engineering

Social engineering identifies and tests human elements and organizational weaknesses with the goal of designing effective educational and awareness programs for employees to help protect against today’s potential security threats.

Customized Training and Education

Kreischer Miller’s professionals are equipped to collaborate with and assist in providing customized and ongoing cyber security training for your organization.

Governance and Best Practices

Kreischer Miller offers a wide-range of services regarding IT governance and cyber security implications to assist your management team with best practices, ranging from policy development and security awareness training to platform configuration reviews and vendor diligence.

The Kreischer Miller Difference

Solution Agnostic: We are not affiliated as a reseller with any IT networking products. As such, we take a fully independent view of all system evaluations and subsequent recommendations.

Client Specific: Our solutions are custom designed to meet the specific needs of each client, taking into account the unique characteristics of your business and industry requirements.

Technical Expertise: Our information and cyber security professionals utilize leading industry tools and methodologies, coupled with extensive experience in the field.