美国证券交易委员会（SEC）因未能报告网络攻击而对纽约证券交易所母公司处以1000万罚款
(SEC fines NYSE parent company 10M for failing to report cyberattack)

Published: 2024-05-22


1. 美国证券交易委员会（SEC）因未报告网络攻击而对纽约证券交易所母公司处以罚款 - 美国证券交易委员会（SEC）对纽约证券交易所（NYSE）的母公司洲际交易所（ICE）处以罚款，原因是该公司未能报告网络攻击. 该公司为2016年发生的事件支付了1000万美元的罚款. 美国证券交易委员会发现，尽管ICE知道这次攻击，但并未及时向公众或其投资者披露. 这凸显了组织，尤其是金融行业组织及时、透明地报告网络事件的重要性.

2. 网络安全合规和披露义务 - 文章强调了公司遵守网络安全法规的重要性及其及时披露此类事件的义务. 如果不这样做，可能会导致严厉的处罚，正如美国证券交易委员会对ICE的罚款所证明的那样. 这一事件提醒组织优先考虑网络安全措施和运营透明度，以保护其利益相关者并保持监管合规性.

3. 对网络安全事件的审查越来越严格 - 美国证券交易委员会对ICE的执法行动表明，金融业对网络安全事件的审查越来越严格. 监管机构在确保公司遵守网络安全协议并适当披露违规行为方面变得更加警惕. 这一发展凸显了建立强大的网络安全框架和事件响应计划的必要性，以有效降低风险. 组织需要主动应对网络安全威胁，并采取适当的措施来保护其数据和运营。. .


1. SEC fines NYSE parent company for failing to report cyberattack - The Securities and Exchange Commission (SEC) fined Intercontinental Exchange (ICE),the parent company of the New York Stock Exchange (NYSE),for failing to report a cyberattack. The company paid a $10 million fine for the incident,which occurred in 2016. The SEC found that ICE did not disclose the attack to the public or its investors promptly,despite knowing about it. This highlights the importance of timely and transparent reporting of cyber incidents by organizations,especially those in the financial industry.

2. Cybersecurity compliance and disclosure obligations - The article emphasizes the significance of companies' compliance with cybersecurity regulations and their obligations to disclose such incidents promptly. Failure to do so can result in severe penalties,as demonstrated by the SEC's fine imposed on ICE. This incident serves as a reminder for organizations to prioritize cybersecurity measures and transparency in their operations to protect their stakeholders and maintain regulatory compliance.

3. Increasing scrutiny on cybersecurity incidents - The SEC's enforcement action against ICE indicates a growing scrutiny on cybersecurity incidents within the financial sector. Regulators are becoming more vigilant in ensuring that companies adhere to cybersecurity protocols and disclose breaches appropriately. This development underscores the need for robust cybersecurity frameworks and incident response plans in place to mitigate risks effectively. Organizations need to proactively address cybersecurity threats and implement adequate measures to safeguard their data and operations.


Reference: cointelegraph.com