Finance Specialist: How brokers should respond to a cyber breach

The discussion focuses on practical steps brokerages should have in place before an incident, including documented response plans, tested backups, and multi-factor authentication, before outlining what to do in the critical first 24–48 hours following a breach.

Garman and Carter also explore communication strategies with clients and regulators, the role of cyber insurance, and the importance of conducting a thorough post-incident review to prevent repeat attacks.