IT Auditor: 2026-09-25

1. SEC Censures OTC Link LLC for Repeated Compliance Failures Related to Regulation SCI

   SEC, 2026-09-22. Read, 2 min.

   The SEC censured OTC Link LLC and ordered a $575,000 civil penalty, finding that from August 2016 to March 2025 the firm failed to establish and maintain written Regulation SCI policies and procedures for system security, access control, and application vulnerability management, testing, and remediation. The order finds that examination staff flagged the missing or draft policies in several examinations, and the firm settled without admitting the findings.

   Why it matters for this role: Escalating a finding that management has left open across audit cycles is easier with the SEC's OTC Link order, which penalized policies its examiners had flagged in several examinations.

IT Auditor