GRC Analyst: 2026-09-25

1. SEC Censures OTC Link LLC for Repeated Compliance Failures Related to Regulation SCI

   SEC, 2026-09-22. Read, 2 min.

   The SEC censured OTC Link LLC and ordered a $575,000 civil penalty, finding that from August 2016 to March 2025 the firm failed to establish and maintain written Regulation SCI policies and procedures for system security, access control, and application vulnerability management, testing, and remediation. The order finds that examination staff flagged the missing or draft policies in several examinations, and the firm settled without admitting the findings.

   Why it matters for this role: The SEC treated procedures left in draft as a failure to establish and maintain them, a reason to confirm that each required procedure in your library is approved and enforced.

GRC Analyst