Incident Response

Covered institutions like SEC-registered investment advisors will be required to create an incident response program as part of their written policies and procedures. This program must be reasonably designed to detect, respond to, and recover from unauthorized access to or use of customer information.