Who’s responsible for cybersecurity: The adviser or the firm?

Q: All we keep hearing about at my firm is “cybersecurity.” I get what I’m supposed to do: Don’t click on strange links in e-mails. Watch out for phishing attempts. Verify distribution requests with my clients verbally. Beyond that, isn’t it the firm’s responsibility to make sure its systems are buttoned up?

A: Actually, the measures you’re taking aren’t the only ones that you personally need to worry about when it comes to cybersecurity.

If you work from home, is your modem secure? If you’re working remotely from a coffee shop, is the Wi-Fi allowing hackers to access your laptop? Do you save your passwords on your smartphone in an unencrypted file? Do you use the same password for different accounts? And have you failed to speak to your clients about how they’re keeping their financial information secure?

Cybersecurity
Monitors display the status of the Sembcorp Industries Ltd. Global Asset Management System (GAMS) at the company's Technology and Innovation Center on Jurong Island in Singapore, on Friday, March 31, 2017. GAMS enables the mangement of Sembcorp's utilitiy facilities around the world through advanced data analytics for process optimisation, troubleshooting and predictive maintenance. Photographer: Ore Huiying/Bloomberg
Ore Huiying/Bloomberg

These are just a few of the additional questions you should be asking yourself.

It might help to re-think your attitude about cybersecurity. Treating it as your firm’s responsibility, not yours, is surest way to undermine your firm’s security (cyber- or otherwise).

The number and frequency of attacks continue to grow, putting your clients’ money at risk (not to mention your firm’s).

Broker-dealers that get hit with cyberattacks not only lose money as a direct result of the incursions, but also lose clients when their reputations take a hit — sometimes at a greater cost than the immediate loss from the financial breach. And if your firm loses clients, you can bet that you’re losing clients —and income — as well.

So if you can’t get on board for the sake of your employer and you’re not concerned about your clients losing money, then at least do it for the sake of your own pocketbook.

Mike Manalac is a CPA with experience at small, Top 20 and Big Four accounting firms and industry-leading Fortune 500 companies. He is currently an accounting manager at Google, as well as the author and illustrator of the No Flux Given playbook. He also pioneered the introduction of the virtual whiteboard to the accounting world. Reach him at www.mikefromaccounting.com.

February 21
Manalac-Mike-No Flux Given

Indraneel Chakraborty is a professor in the finance department at Miami Herbert Business School. He has worked for Citadel Investments and Citigroup Global Markets fixed-income divisions.

February 21

Dividend strategies can provide steady returns over time with less volatility, but growth-oriented stocks can also be an attractive option.

February 21
6 Min Read
Wall Street Bull and Bear investing

For reprint and licensing requests for this article, click here.
Cyber security Compliance Technology Practice management
MORE FROM FINANCIAL PLANNING