Like any financial services firm committed to cybersecurity, fund managers should be regularly reevaluating and revising their policies and procedures to adequately align with the cybersecurity guidelines provided by supervisory governing bodies, as well as investor operational due diligence initiatives. The SEC’s Office of Compliance Inspections and Examinations recently released its 2020 examination priorities and, separately, a report on cybersecurity resiliency. The OCIE publications, taken together, effectively detail what the examiners will be focusing on when reviewing a fund manager’s cybersecurity program. In a guest article, Martin Passante, associate at Drawbridge Partners, provides six important steps for fund managers to take in light of those two documents. For more from Drawbridge Partners, see “Lessons for Fund Managers From the SEC’s First Identity Theft Red Flags Rule Settlement” (Nov. 15, 2018).