Direct indexing has recently become a hot topic in the financial industry and for advisors looking to differentiate themselves from the pack, fund giant Vanguard recently identified four situations that they should consider using direct indexing. The first is tax-loss harvesting. For example, when an index is up, some of its holdings can be trading at a loss. An investor in a direct indexing strategy can sell those stocks and create a tax loss that can be used to offset taxes that are due as a result of an overall gain for the index. The firm also lists ESG as another reason. A custom index can be designed to avoid shares of firms involved with fossil fuels. The third situation is factor investing, or investing in companies that have specific factors such as growth, value, or quality. A custom index can be created to meet those criteria. The last situation Vanguard recommends is diversification. A custom index can be built to accommodate an investor that may be required to hold a certain number of shares in his or her employer.

Finsum:According toVanguard, tax-loss harvesting, ESG, factor investing, and diversification are four strategies that advisors should consider when building custom indexes.

While the SEC has been pushing public companies to improve their cybersecurity, minimal adoption of stronger cybersecurity rules has led the agency to draft new rules requiring more formal cybersecurity reporting and disclosure. The SEC proposal outlined several requirements that are designed to improve cybersecurity awareness and reporting for corporate executives and board members. The first is cybersecurity incident reporting, including current reporting about material incidents and periodic reporting about previous incidents. The second requirement is cybersecurity policies such as periodic reporting about policies and procedures to identify and manage risks. The third proposal is management requirements including management’s role and expertise in assessing and managing risk and management’s role and expertise in implementing policies and procedures. The final requirement is board oversight such as reporting on how the board of directors performs oversight on cybersecurity and disclosure of the board of directors’ cybersecurity expertise if any.

Finsum:The SEC recently drafted new cybersecurity rules for companies, including incident reporting, policies, management requirements, and board oversight.

Over the past several months, financial firms are seeing an uptick in ransomware attacks. In fact, IT security professionals in the financial industry have noted that ransomware attacks have not only become more common but have also become more sophisticated. Cybersecurity professionals are seeing a new wave of threats that banks and investment firms are struggling to prevent. Over the past two years, financial firms are seeing more ransomware attacks that utilize outside service providers which are also known as ransomware-as-a-service. Firms are also seeing variants that have chosen different attack vectors, meaning they are now attacking other areas of firms such as corporate phone systems. According to Sophos’ The State of Ransomware in Financial Services 2022, 55% of financial service firms were victims of at least one attack in 2021, up from 34% in the previous year. The bigger issue for banks and other financial firms though is not just the number of ransomware threats, but their increasing sophistication.

Finsum:Financial firms are not only seeing an increase in ransomware threats, but the sophistication of attacks has also increased.