A Timely Guest Read for Advisory Firms: “Cufflinks or Handcuffs” by Brian Hahn, MTradeCraft

As advisory firms prepare for the amended Regulation S-P requirements, cybersecurity is no longer just an IT issue. The SEC’s expectations increasingly focus on whether a firm’s written policies, vendor oversight, and public disclosures align with actual practice, with potential consequences that can reach the executive level. The attached guest article by Brian Hahn of MTradeCraft walks through the practical implications for firm leadership, including third-party risk (especially MSPs), incident readiness, and why “best practices” language without evidence can create avoidable exposure.

Cufflinks Or Handcuffs012026.pdf

Download PDF • 1.84MB