Cybersecurity Content

Filter Results By
Showing Results 1 - 10 of 29
Image
Two people monitoring information on a computer screen

2025 ICI Operational Resiliency Tabletop Exercise -Service Provider Disruption: After-Action Report

The 2025 ICI Operational Resiliency Tabletop Exercise, simulated a prolonged outage at AlphaPrime Trust Company caused by its fourth-party vendor, CoreDataX. The disruption affected critical processes such as trade matching, settlement, and client reporting, engaging 42 firms and over 50 participants to examine fourth-party risk and strengthen resilience beyond traditional cybersecurity concerns.

Image
Cybersecurity Resource Hub icon
Resource Hub

Cybersecurity

This resource hub provides information and resources on cybersecurity.
ICI Default BG

ICI Cyber Industry Tabletop Exercise 2024: After-Action Report

The asset management industry relies on a complex web of service providers, creating layered outsourcing models that include fourth-party vendors. The 2025 ICI Operational Resiliency Exercise, hosted by Charles Schwab, tested industry response to a fourth-party outage at AlphaPrime Trust caused by CoreDataX. The simulation engaged 42 firms to address cascading risks from complex outsourcing and strengthen resilience beyond cybersecurity.

The asset management industry faces an escalating battle against cybercriminals employing increasingly sophisticated tactics. From state-sponsored attacks to ransomware-as-a-service (RaaS) platforms...

ICI Default BG

ICI Comment Letter on Proposed CIP Rule for Advisers

The Investment Company Institute provides comments on the notice of proposed rulemaking that would require certain investment advisers to implement customer identification programs (CIPs). The NPRM was issued only weeks after the comment deadline on a separate, but related, proposal...

ICI Default BG

ICI Comment Letter on the CIRCIA Proposal

In this letter the Investment Company Institute provides its views on the notice of proposed rulemaking on Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) Reporting Requirements from the Cybersecurity and Infrastructure Security Agency of the Department of Homeland...