test 2
Resource Hub

Cybersecurity

This Resource Hub provides information and resources on cybersecurity.

Overview

For nearly 20 years, ICI has actively engaged with members, regulators, law enforcement, and other stakeholders—both domestic and global—on cybersecurity issues and experiences. By employing a broad strategy of committee sessions, events, public and private collaboration, and relationship building, the Institute has constructed the most comprehensive, member-driven approach to cybersecurity of any association worldwide. As a result, ICI has become the leading voice on cybersecurity advocacy for the mutual fund industry.

Among a variety of activities, the Institute has developed strong member forums through domestic and global information security committees where members can exchange ideas, learn of current threats and trends, and discuss unique elements of information security for mutual funds. Throughout the years, the Institute has collaborated with members to develop custom benchmarking, which aids in assessment of cybersecurity readiness, and has taken that work to associations across the globe. These efforts are the only instance of benchmarking solely for the mutual fund industry. In addition, Institute staff has built extensive private-public relationships that bring a broad level of subject matter expertise and information to the members, aiding their work in protecting information.

ICI Contact List

News & Publications

ICI Default BG
ICI Viewpoints

Working to Ensure Funds Can Maintain Vital Services

Key personnel of mutual fund sponsors and service providers should be deemed “essential workers” and thus should be permitted to report to work to maintain security and services for fund investors. Two key developments over the weekend offered some hope that state governors will hear this message and provide the needed relief from their shelter-in-place orders.
ICI Default BG
ICI Viewpoints

During COVID-19 Crisis, Fund Company Staff Are Essential

As governments consider extending orders to “shelter in place,” they must include staff of fund companies among the “essential” workers who qualify for an exemption. Fund company staff are very much part of the country’s critical infrastructure, and they must be able to offer their full support to shareholders during these uncertain times.
View More
View All News & Publications

Policy & Regulatory Updates

Research & Statistics

ICI Default BG
White Paper

ICI Cyber Industry Tabletop Exercise 2024: After-Action Report

The asset management industry faces an escalating battle against cybercriminals employing increasingly sophisticated tactics. From state-sponsored attacks to ransomware-as-a-service (RaaS) platforms enabling low-skilled criminal infiltrations, the threat landscape is more complex than ever. Unlike cyber-attacks that focus on service disruption of a common industry service provider or infrastructure without necessarily seeking direct financial gain, ransomware attacks are more isolated in scope and are focused on extorting victims. Ransomware attacks are increasing and create significant...
ICI Default BG
White Paper

ICI Cyber Industry Tabletop Exercise 2024: After-Action Report

The asset management industry faces an escalating battle against cybercriminals employing increasingly sophisticated tactics. From state-sponsored attacks to ransomware-as-a-service (RaaS) platforms enabling low-skilled criminal infiltrations, the threat landscape is more complex than ever. Unlike cyber-attacks that focus on service disruption of a common industry service provider or infrastructure without necessarily seeking direct financial gain, ransomware attacks are more isolated in scope and are focused on extorting victims. Ransomware attacks are increasing and create significant...
View More
View All Research & Statistics

Member Resources

Additional Resources

Large-scale cyberattacks are the most prominent threat to financial services. As such, Investment Company Institute (ICI) members have long taken cybersecurity seriously. Client, customer, and employee data and privacy are of the utmost importance—whether addressed through

  • public-private partnerships,
  • ever-evolving security policies and procedures,
  • security training,
  • information sharing networks, or
  • constant monitoring and vigilance.

ICI contributes to the multilayered security approach of its members’ cybersecurity preparedness by offering multiple complimentary initiatives. This includes peer-to-peer engagement, security benchmarking, facilitating relationships with law enforcement, key security vendor presentations, and much more.

Read more in the ICI Cybersecurity Initiatives for Members paper.