The SEC hasn’t been very specific about what it wants firms to do on cybersecurity.”

Justin Kapahi, vice president for solutions and security, External IT