Guides and Resources

CIRO, through its predecessor organization IIROC, published resources to help Dealers protect themselves and their clients against cyber threats and attacks:

  • Ransomware Response Playbook can be used as a guide when dealing with ransomware incidents.
  • The Cybersecurity Self-Assessment Tool was developed to help small and medium-sized investment dealer firms identify areas of strength and weakness based on the information security practices. Request a copy of the tool by filling out this form.
  • The Cybersecurity Best Practices Guide provides an enterprise-wide risk-based framework of industry standards and best practices that Dealers can apply to heighten awareness and manage cyber risks in an evolving environment.
  • The Cyber Incident Management Planning Guide is a complementary tool for Dealers to prepare effective response plans for cyber threats and attacks.
  • The Cyber Program Governance Guide is intended to provide investment dealer members with explicit guidance on how best to implement, manage and advance a cybersecurity program.
  • Fundamentals of Technology Risk Management is a guide to help mainly investment dealer firms take the first steps towards assessing and managing technology risk. This guide provides some helpful information to investment dealer firms on how to begin building a technology risk management program.

Welcome to CIRO.ca!

You can find the Canadian Investment Regulatory Organization (CIRO) at CIRO.ca with our fresh look and feel.