Regulators in Massachusetts and Illinois are polling investment advisors registered in the states on their cybersecurity policies and practices.
Massachusetts securities regulator William Galvin said Tuesday that advisors' responses could prompt changes in the state's current regulations.
The survey includes 23 questions and covers firms' policies and procedures on cybersecurity, including types of authentication, encryption software, types of hardware, electronic backup and arrangements with third-party providers, as well as costs and insurance coverage.
Advisors in both states must complete the survey by June 24.
Tanya Solov, director of the Illinois Securities Department, told ThinkAdvisor that Illinois' survey includes "very slight revisions [from Massachusetts'] to account for Illinois law."