Cybersecurity Maturity Model Certification
Cybersecurity Maturity Model Certification requirements are arriving in Financial & Capital Markets through a combination of direct Department of Defense contract obligations and downstream pressure from the U.S. Securities and Exchange Commission's cybersecurity disclosure rules and the Federal Financial Institutions Examination Council's updated examination procedures. Firms with any defense-adjacent lending, payments infrastructure, or contractor relationships are now reconciling CMMC Level 2 documentation requirements against existing NIST SP 800-171 gap assessments. The compliance question is no longer whether CMMC applies to financial firms; it is which business lines and third-party relationships pull them into scope.
Watch
- CMMC Level 2 final rule (32 CFR Part 170): effective date and contractor flow-down obligations
- SEC cybersecurity incident disclosure rule: 4-day Form 8-K filing clock for material breaches
- FFIEC examination updates incorporating NIST CSF 2.0 benchmarks for core institutions
- Third-party and vendor scoping: which fintech and cloud contracts trigger CMMC controlled unclassified information rules
Recent material activity in Financial & Capital Markets
A selection of recent published briefs; this is not a complete archive.
CFTC obtains federal court orders requiring Alexandre and EminiFX to pay over $288 million for commodity pool Ponzi scheme
The CFTC announced on October 19, 2026 that the U.S. District Court for the Southern District of New York entered orders against Eddy Alexandre and EminiFX Inc. for operating a commodity pool Ponzi scheme. The orders req…
Read a full sample brief →CIRO schedules December 8 settlement hearing for registered representative Patrick H. Watson
On October 19, 2026, CIRO announced that a settlement hearing has been scheduled for Patrick H. Watson. The notice alleges Watson failed to act as a gatekeeper to the capital markets. Canaccord Genuity Corporation is ide…
Read a full sample brief →CIRO opens active enforcement proceeding against Patrick H. Watson on gatekeeper obligations
CIRO has commenced an enforcement proceeding against Patrick H. Watson, with gatekeeper obligation failures as the central allegation. The source does not specify the conduct alleged, Watson's registration category, or t…
Read a full sample brief →ASIC cancels MWL Financial Services credit licence following CSLR compensation payment of $90,031
ASIC cancelled the Australian credit licence of MWL Financial Services Pty Ltd (In Liquidation) on 12 October 2026. The cancellation was mandatory and non-discretionary, triggered by a $90,031.34 CSLR payment made on 16 …
Read a full sample brief →RBI sanctions amalgamation of Emirates NBD Bank Indian branches into RBL Bank, effective December 1, 2026
The Reserve Bank of India has sanctioned the amalgamation of the Indian branches of Emirates NBD Bank P.J.S.C. with RBL Bank Limited. All Indian branches of Emirates NBD Bank will operate as branches of RBL Bank from Dec…
Read a full sample brief →SFC endorses HKEX proposal to shift Hong Kong equities settlement from T+2 to T+1 by September 2028
The SFC issued a statement on October 16, 2026 welcoming HKEX's Consultation Conclusions Paper on accelerated settlement for Hong Kong's cash equity market. HKEX has revised its implementation timeline to the second half…
Read a full sample brief →Brazil CVM consolidates securitization company regulation under Resolution 60, revoking four prior instructions
Brazil's Comissão de Valores Mobiliários (CVM) issued Resolution 60 on December 23, 2021, consolidating the rules governing credit-rights securitization companies registered with the CVM. The resolution revoked four prio…
Read a full sample brief →Federal Reserve terminates three enforcement actions against Gardner Bancshares and Small Business Bank
The Federal Reserve Board terminated three enforcement actions against Gardner Bancshares, Inc. and Small Business Bank, both of Lenexa, Kansas, effective October 13, 2026. The terminated actions comprise two cease and d…
Read a full sample brief →LTSE files immediately effective rule change aligning clearly erroneous execution review with SEC-approved overnight trading price bands
On October 8, 2026, Long-Term Stock Exchange, Inc. filed a proposed rule change with the SEC, effective upon filing, to amend its clearly erroneous execution rule. The amendment aligns the rule with the SEC's August 5, 2…
Read a full sample brief →Nasdaq ISE proposes to eliminate cross-market risk controls shared with affiliate Nasdaq GEMX
Nasdaq ISE, LLC filed a proposed rule change on October 1, 2026, granted immediate effectiveness by the SEC, to amend its Market-Wide Speed Bump and Kill Switch. The proposal removes existing cross-market functionality t…
Read a full sample brief →