Compliance with IIROC’s Cybersecurity Incident Reporting Requirements

IIROC is publishing guidance on subsection 3703(1) and clause 3703(2)(vii) of IIROC Rules (Cybersecurity Incident Reporting Requirements). The guidance outlines IIROC’s requirements related to the Cybersecurity Incident Reporting Requirements and also provides guidance to Dealer Members on how to demonstrate compliance with IIROC requirements.

The guidance will be effective immediately and replaces GN-3700-21-005 - Frequently Asked Questions – Mandatory Cybersecurity Incident Reporting.

Appendices

Appendix A – GN-3700-22-001 Compliance with IIROC’s Cybersecurity Incident Reporting Requirements