On January 7, the National Futures Association (NFA) issued a notice to its members that amendments to its Interpretative Notice, entitled NFA Compliance Rules 2-9, 2-36 and 2-49: Information Systems Security Programs, were finalized and will take effect on April 1.
The amendments make certain changes to the Interpretive Notice related to employee training obligations and information systems security program approval, as well as require NFA members to notify the NFA of certain cybersecurity incidents related to a member’s commodity interest activities.
The proposed amendments were previously discussed in the December 7, 2018 edition of Corporate & Financial Weekly Digest.
NFA Notice I-19-01 is available here.