1. Cybersecurity is more than a compliance issue, it is a business issue for all businesses, including investment advisers. What do your policies and procedures say and are you actively following them? How are your service providers protecting your data and their businesses?
2. The SEC regulators are focusing on two areas:
   • Operation weaknesses, such as cybersecurity and compliance programs that are not customized to the adviser’s actual business.
   • Technical breaches, such as ADV inaccuracies and Form D violations. The SEC sees enforcement of these as promoting a fulsome culture of compliance.
3. Have you examined your service provider contracts? Who is liable for losses from data breaches and hacks? Regulatory examinations typically require lists of service providers. We suggest preparing this list now and use it as an inventory of counterparties that need to be analyzed as part of your internal cybersecurity assessment. Additionally, we suggest preparing a list of questions to assess your service providers’ preparedness in case of a breach.
4. Create a cybersecurity check list and provide a disclosure to your investors and clients so the protocol is clear should a breach occur.
5. Institutional investors take operational due diligence seriously and incur significant time and expense performing due diligence.
6. Assertions made by managers during the investment and operational due diligence phases are “remembered” and institutional investors will question or withdraw if managers contravene their previous assertions.
7. Investment due diligence, in part, focuses on verifying previous trades and investments – be prepared to provide back-up information.
8. When considering offshore jurisdictions, remember to consider what service providers are available in that location.
9. The most common offshore jurisdictions have well developed and efficient regulatory and court systems.
10. Operational and annual filing expenses can be significant, forecasting AUM growth for an offshore fund is an important planning step.

Look for information on the next Investment Insights event in early 2016.