Products April 18, 2014

Arnerich Massena Expands Fiduciary Education

Investment advisory firm Arnerich Massena has expanded its fiduciary education program to include retirement plans.
Reported by

The program, Blueprints, was previously available only to fiduciaries or investment committee members of endowments and foundations (see “Arnerich Massena Offers Fiduciary Education”). The expansion now allows new investment committee members of employer-sponsored retirement plans to take advantage of this program for their own custom fiduciary needs.

The formal curriculum of the program is available to all clients of Arnerich Massena and is designed to provide new committee members with the fundamental knowledge needed to act as prudent fiduciaries for their respective retirement plans.

For more stories like this, sign up for the PLANADVISERdash daily newsletter.

Materials for the program include information about fiduciary responsibilities, retirement plan governance and plan investment menu construction, as well as benchmarking and performance evaluation.

“Being an investment committee member for a retirement plan brings with it a great deal of responsibility and accompanying liability. Gaining an understanding of the responsibilities and the background knowledge required to execute those responsibilities is often challenging and time consuming,” says Scott Dunbar, senior managing director of the Portland, Oregon-based Arnerich Massena.

Dunbar believes that committee education, like the Blueprints program, has the potential to improve committee discussions, decisions and long-term outcomes for retirement plan participants.

More information can be found at www.arnerichmassena.com.

Compliance April 18, 2014

SEC Kicks Off Cybersecurity Assessment

The Securities and Exchange Commission’s Office of Compliance Inspections and Examinations (OCIE) launched an initiative to assess the cybersecurity of registered broker/dealers and investment advisers.
Reported by

The OCIE explains in a recent Risk Alert that the cybersecurity assessment will involve 50 audits of brokers/dealers and investment advisory firms, focusing on areas related to technology and cyber-threat preparedness.

OCIE auditors say they will seek information related to the firms’ digital governance, identification and assessment of potential cybersecurity risks, and how well the firms actively protect their networks and information infrastructure. Officials hope to use the reviews to develop recommendations and regulation to improve the overall digital security of the investment advisory and securities trading industries.  

Want the latest retirement plan adviser news and insights? Sign up for PLANADVISER newsletters.

SEC officials have said they are especially concerned with risks that may be emerging as more providers offer online and mobile access to client accounts and fund transfer requests, as well as risks associated with vendors and other third-party service providers, where detection of unauthorized or illegal activity can be more difficult to identify and police (see “SEC Outlines 2014 Examination Priorities”).

As part of the OCIE’s efforts to promote compliance and to share with the industry where it sees the most significant risks, auditors included an appendix in the Risk Alert that provides advisers and broker/dealers with sample request-for-information documents that will be used in the audits. The OCIE says the appendix is intended to empower compliance professionals in the industry with questions and tools they can use to assess their firms’ current level of preparedness, regardless of whether or not they are included in the actual examination initiative.

The information request are substantial and ask for information regarding everything from how often an adviser or broker/dealer firm takes inventory of its network hardware and computing devices to whether the firm maintains a written data destruction policy. Another question requests a firm’s “written business continuity of operations plan that addresses mitigation of the effects of a cybersecurity incident.”

The SEC encourages firms to take a close look at the appendix and the various best practices it suggests across such areas as detection of unauthorized network access and assessing third-party cybersecurity capabilities.

«