Securities and Exchange Commission Proposed Rule

2023-05766: Cybersecurity Risk Management for Investment Advisers, Registered Investment Companies, and Business Development Companies; Reopening of Comment Period

Comment Period Closed

Public comment closed .

Get alerted when the next rule lands

New rules open for comment on their own schedule. Pick how you want to hear about them — we email you when one appears.

Alert me on new Securities and Exchange Commission rules or alert me on a subject

Publishing to members? Embed a live rule tracker on your own site — the proposed rules in your area and the comment deadlines closing on them, updating themselves. Free, one line of HTML.

Create a free account & build one →

Summary

The Securities and Exchange Commission ("Commission") is reopening the comment period for a release ("Investment Management Cybersecurity Release") proposing new rules under the Investment Advisers Act of 1940 ("Advisers Act") and the Investment Company Act of 1940 ("Investment Company Act") that would require registered investment advisers ("advisers") and investment companies ("funds") to adopt and implement written cybersecurity policies and procedures reasonably designed to address cybersecurity risks, disclose information about cybersecurity risks and incidents, report information confidentially to the Commission about certain cybersecurity incidents, and maintain related records. Reopening the comment period for the Investment Management Cybersecurity Release will allow interested persons additional time to analyze the issues and prepare their comments in light of other regulatory developments on cybersecurity.

The agency’s own summary, as published.

What this changes

Amends 7 parts of the Code of Federal Regulations — the standing rules this notice rewrites.

Don't miss the comment window

One Click Politics alerts you on every deadline, hearing, and rule change.

See all rules with comments due soon →