2026-07-15

Added · Updated

CSA publishes updated cybersecurity findings and guidance for registered firms

The Canadian Securities Administrators published CSA Staff Notice 33-322 following a compliance examination sweep of 73 registered firms' cybersecurity practices. The notice identifies observed practices and gaps in areas such as policies, employee training, risk assessments, third-party oversight, and incident response planning. It provides updated guidance for firms of all sizes to establish cybersecurity practices appropriate to their operations and expects firms to review the notice, assess their practices, and take proactive steps to address identified gaps.

Ontario Securities Commission logo

Canada

Ontario Securities Commission

Click to view full text

More like this from OSC

OSC published 8 documents in the last 30 days. We email you each new one the day it's published.

Topics
Share