Apparently, despite requiring public companies and regulated entities to prepare for business disruptions, the SEC’s house does not seem to be in order.

In a recent report, the SEC was criticized for not having a comprehensive business disruption program, and allowing certain important activities to be at risk if there was a business disruption.  For example, the SEC had not yet updated its supplemental plans or provided that the certain network data was protected.  The critical report announced 38 recommendations that SEC should consider implementing.  To its credit, the SEC has agreed to implement them.   

Obviously, the SEC should clean its own house and ensure that it will continue to monitor the markets in case of a major business disruption.