Despite its role as the main regulator of Wall Street, The U.S. Securities and Exchange Commission (SEC) has had its cybersecurity strategies called into question over the years. The recent hack of the SEC’s X account only illuminates a longstanding issue: the agency’s cybersecurity defenses have consistently failed to meet expected standards.
Existing cybersecurity protocols at the SEC have been previously analyzed. Last year’s review by the commission’s internal watchdog revealed that the agency did not fully adhere to federal cybersecurity standards. Notably, the absence of mandatory multifactor authentication for public-facing systems was identified as a problem area. This internal review was one of multiple investigative reports highlighting the shortcomings of the SEC’s cybersecurity.
Weaknesses in the SEC’s security measures, such as insufficient protocols to prevent unauthorized access to networks, were also pointed out in an independent evaluation conducted one year prior to the aforementioned internal review. It’s clear that the commission’s cybersecurity architecture leaves much to be desired.
The SEC is not alone in its cybersecurity struggles, however. Many federal agencies have also been heavily criticized for their cybersecurity practices. The spotlight cast on the SEC by this recent hack brings an ongoing, government-wide issue to the forefront once again.
With ever-increasing cyber threats and escalating concerns around data privacy, it is crucial now more than ever for both governmental bodies and corporate entities to prioritize and enhance their cybersecurity strategies.
For the full report, please visit Bloomberg Law’s comprehensive article.