IIROC proposes mandatory reporting of cybersecurity incidents

The Investment Industry Regulatory Organization of Canada (IIROC) has proposed mandatory reporting of cybersecurity incidents. Comments are being requested on the regulator’s proposal until May 22.