Common use of Risk Assessments Clause in Contracts

Risk Assessments. Broker-Dealer shall conduct a periodic, documented Risk Assessment of its Information Systems sufficient to inform the design of its cybersecurity program. Such Risk Assessment shall be updated as reasonably necessary to address changes to Broker-Dealer’s Information Systems, Nonpublic Information or business operations. Broker-Dealer's Risk Assessment shall allow for revision of controls to respond to technological developments and evolving threats and shall consider the particular risks of Broker-Dealer’s business operations related to cybersecurity, Nonpublic Information collected or stored, Information Systems utilized and the availability and effectiveness of controls to protect Nonpublic Information and Information Systems.