RIAs have always had a fiduciary responsibility to their clients, businesses and stakeholders. But with the SEC’s changes to Regulation SP, the potential fallout from a recent Supreme Court ruling, and the growing burden of cybercrime on businesses, their hands as cyberfiduciaries are forced.

The revised SP regulations issued in May require RIAs and other covered institutions to add incident response programs to their cybersecurity manuals that are “reasonably designed to detect, respond to, and recover from unauthorized incidents…