IA helps asset managers tackle cyber security threats

Tuesday 01 May 2018

The Investment Association (IA) today hosts its first Cyber Security Conference for Asset Management. With more cyber-attacks launched on UK businesses than ever before, the IA’s conference brings together key experts from law enforcement and government agencies to advance the industry’s ability to identify and respond to cyber threats.

At the conference, the IA and KPMG are launching a report, ‘Building Cyber Resilience in Asset Management’, on the key cyber security risks facing the asset management industry and providing practical steps that organisations can take to build a cyber resilient business.

In particular, the report calls on Boards and senior management at asset management firms to increase collaboration across the industry and invest in developing a cyber response framework allowing firms to rapidly detect, respond and recover from potential attacks.

To assist asset management firms, the IA has launched a Cyber Security Committee. The Committee, which met for the first time last month, will work with firms, regulators and public authorities to ensure the industry is leading edge and to develop cyber security industry guidance.

Also at the IA conference, the City of London Police are launching Cyber Griffin, a new initiative to make the Square Mile more secure from cyber attacks. Cyber Griffin will see specially-trained officers lead a series of community focused exercises which will include threat briefings, intelligence sharing and incident response training. This initiative echoes a key finding of the ‘Building Cyber Resilience in Asset Management’ report which stresses the importance of collaborating, sharing and utilising the insights and experiences of others as a means of reducing systemic threats across the entire asset management industry.

Chris Cummings, Chief Executive of the Investment Association said:

"The asset management sector is prioritising cyber defence, mitigation and resilience to develop a corporate culture that embraces cyber security at its heart. Technology is transforming our industry at a speed and scale never seen before, with criminals also becoming more creative in how they attack financial systems.

“Cyber security issues are not going away and businesses need to understand, manage and mitigate potential cyber security risks. It is testimony to the importance of asset management firms in the City that the City of London Police selected our industry event to launch Cyber Griffin. We will continue to support the industry as it adapts to counter the ever growing threats from cyber security.”

Matthew Martindale, Partner and Investment Management Cyber Security lead, KPMG UK:

“Asset managers exist to protect clients’ assets and that no longer means just making a return. Protecting client’s money and data in a digital world is a challenge - more tech means more cyber-crime - and the consequences of getting it wrong will be severe.

“The challenge is a big one and it won’t have an end point but there are some practical steps that can be taken to make quick and effective progress. Firstly, firms can appoint a single point of contact on the board who takes ownership of cyber security. Beyond that, staff need to be educated; ask yourself whether your staff at all levels know how to identify and react to a phishing email? The adage that an organisation is only as good as its people is especially true with cyber security where the actions of one individual can have enormous ramifications.”

Sergeant Charlie Morrison who will lead the Cyber Griffin delivery team said:

“Although cyber criminality challenges traditional policing as we know it, we are now more capable than ever to tackle the problem. However, it’s imperative we work with our local community to do this, especially in such a unique area as the City of London which is full of businesses who have the potential to be the target for a cyber-attack.

“Cyber criminals specialise in looking for the weak spots in our security. Cyber Griffin therefore is about basics done well. Through briefings, incident response drills and expert guidance, the aim is to get the fundamentals right every time.

“In this case the best offence is a good defence.”

-Ends-

Notes to Editors

IA and KPMG Building Cyber Resilience in Asset Management Report.

For media enquiries:

Anisha Patel, Head of Communications: [email protected]
T +44 (0)20 7269 4635

Helen Ayres, Media Relations Manager: [email protected]
T +44 (0)20 7269 4696, M +44 7508 724066

About the Investment Association:

• The IA champions UK asset management, supporting British savers, investors and businesses. Our 240 members manage £6.9 trillion of assets and employ 93,500 people across the UK.
• Our mission is to make investment better. Better for clients, so they achieve their financial goals. Better for companies, so they get the capital they need to grow. And better for the economy, so everyone prospers.
• Our purpose is to ensure investment managers are in the best possible position to:
  • Build people’s resilience to financial adversity
  • Help people achieve their financial aspirations
  • Enable people to maintain a decent standard of living as they grow older
  • Contribute to economic growth through the efficient allocation of capital.
• The money our members manage is in a wide variety of investment vehicles including authorised investment funds, pension funds and stocks and shares ISAs.
• The UK is the second largest investment management centre in the world, after the US and manages 37% of all assets managed in Europe.