Who’s responsible for cybersecurity: The adviser or the firm?

Q: All we keep hearing about at my firm is “cybersecurity.” I get what I’m supposed to do: Don’t click on strange links in e-mails. Watch out for phishing attempts. Verify distribution requests with my clients verbally. Beyond that, isn’t it the firm’s responsibility to make sure its systems are buttoned up?

A: Actually, the measures you’re taking aren’t the only ones that you personally need to worry about when it comes to cybersecurity.

If you work from home, is your modem secure? If you’re working remotely from a coffee shop, is the Wi-Fi allowing hackers to access your laptop? Do you save your passwords on your smartphone in an unencrypted file? Do you use the same password for different accounts? And have you failed to speak to your clients about how they’re keeping their financial information secure?

Cybersecurity
Monitors display the status of the Sembcorp Industries Ltd. Global Asset Management System (GAMS) at the company's Technology and Innovation Center on Jurong Island in Singapore, on Friday, March 31, 2017. GAMS enables the mangement of Sembcorp's utilitiy facilities around the world through advanced data analytics for process optimisation, troubleshooting and predictive maintenance. Photographer: Ore Huiying/Bloomberg
Ore Huiying/Bloomberg

These are just a few of the additional questions you should be asking yourself.

It might help to re-think your attitude about cybersecurity. Treating it as your firm’s responsibility, not yours, is surest way to undermine your firm’s security (cyber- or otherwise).

The number and frequency of attacks continue to grow, putting your clients’ money at risk (not to mention your firm’s).

Broker-dealers that get hit with cyberattacks not only lose money as a direct result of the incursions, but also lose clients when their reputations take a hit — sometimes at a greater cost than the immediate loss from the financial breach. And if your firm loses clients, you can bet that you’re losing clients —and income — as well.

So if you can’t get on board for the sake of your employer and you’re not concerned about your clients losing money, then at least do it for the sake of your own pocketbook.

Ian Vacin is co-founder and chief partnerships officer at Karbon and is co-author of Scale with Purpose: The Service Entrepreneur's Guide to Intentional Growth. He has nearly three decades of leadership experience in technology and accounting with Karbon, Xero and Intuit, and is passionate about helping accounting professionals be as successful as possible so they can better serve the small businesses they support.

13m ago
Ian Vacin headshot.jpg

The Oasis Group CEO and founder John O'Connell dazzled his audience at ADVISE AI by showing how artificial intelligence can shave hours off the production of plans, stock analyses, even web pages. But at least one advisor remains skeptical.

1h ago
6 Min Read
John O'Connell of Oasis Group speaks at Financial Planning's ADVISE AI Conference on Oct. 28, 2025 in Las Vegas.

Morgan Stanley acquires EquityZen, a private share trading platform, expanding its offerings for fast-growing startups.

4h ago
3 Min Read
Ted Pick Morgan Stanley.jpg

For reprint and licensing requests for this article, click here.
Cyber security Compliance Technology Practice management
MORE FROM FINANCIAL PLANNING