--- title: "Cybersecurity in Financial Services: The FIIG Securities Case" description: ASIC takes legal action against FIIG Securities for significant cybersecurity failures, highlighting the critical importance of robust cyber governance in financial services. image: https://digitalfrontierpartners.com.au/hubfs/AI-Generated%20Media/Images/The%20image%20captures%20an%20old%20office%20environment%20within%20a%20financial%20institution%20showcasing%20a%20traditional%20conference%20room%20with%20a%20old%20%20table%20and%20comfortable%20chairs%20room%20of%20board%20members%20men%20%20old%20times%20%20traditional-1.jpeg --- [Skip to content](https://digitalfrontierpartners.com.au/news/cybersecurity-in-financial-services-the-fiig-securities-case#main-content) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp)](https://www.digitalfrontierpartners.com.au/) - [Services](https://digitalfrontierpartners.com.au/news/cybersecurity-in-financial-services-the-fiig-securities-case#products) Show submenu for Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) - Resources Show submenu for Resources - [News](https://digitalfrontierpartners.com.au/news/tag/news) - [Case Studies](https://digitalfrontierpartners.com.au/news/tag/case-study) - [Research](https://digitalfrontierpartners.com.au/news/tag/research) - [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) - [About](https://digitalfrontierpartners.com.au/news/cybersecurity-in-financial-services-the-fiig-securities-case#about) Show submenu for About - [About Us](https://digitalfrontierpartners.com.au/about) - [Contact Us](https://digitalfrontierpartners.com.au/contact) Open main navigation Close main navigation - [Services](https://digitalfrontierpartners.com.au/news/cybersecurity-in-financial-services-the-fiig-securities-case#products) Show submenu for Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) - Resources Show submenu for Resources - [News](https://digitalfrontierpartners.com.au/news/tag/news) - [Case Studies](https://digitalfrontierpartners.com.au/news/tag/case-study) - [Research](https://digitalfrontierpartners.com.au/news/tag/research) - [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) - [About](https://digitalfrontierpartners.com.au/news/cybersecurity-in-financial-services-the-fiig-securities-case#about) Show submenu for About - [About Us](https://digitalfrontierpartners.com.au/about) - [Contact Us](https://digitalfrontierpartners.com.au/contact) - [Contact us](https://digitalfrontierpartners.com.au/contact) [Contact us](https://digitalfrontierpartners.com.au/contact) 25 March 2025 11:17:05 AM # Cybersecurity in Financial Services: The FIIG Securities Case ![Picture of Digital Frontier Partners](https://digitalfrontierpartners.com.au/hs-fs/hubfs/500x%20DFP%20(3).png?width=50&name=500x%20DFP%20(3).png) [Digital Frontier Partners](https://digitalfrontierpartners.com.au/news/author/digital-frontier-partners) In March 2025, ASIC commenced legal action against FIIG Securities Limited, a fixed-income investment specialist, for systemic and prolonged cybersecurity failures that spanned a four-year period from 2019 to 2023. The case provides a clear signal to Australian financial services licensees: cybersecurity governance is now an enforceable requirement under the Corporations Act. ### Summary of the Case ASIC alleges that FIIG Securities failed to maintain adequate cyber risk management controls, leading to a significant data breach in which approximately 385GB of sensitive data—including personal information of over 18,000 clients—was exfiltrated. According to ASIC, the breach went undetected for nearly three weeks, indicating serious deficiencies in detection and response capabilities. The regulator is pursuing civil penalties under section 912A of the Corporations Act, which requires AFS licensees to have adequate risk management systems in place. Penalties for breaches may exceed $13 million per contravention or 10% of annual turnover, whichever is greater. ### Key Areas of Alleged Non-Compliance According to ASIC’s media release and supporting documentation, the key failings cited in the case include: - **Governance Failures:** Lack of board-level accountability for cybersecurity risks, with no integration of cyber into governance frameworks. - **Technical Deficiencies:** Misconfigured firewalls, outdated software, unpatched vulnerabilities, and poor privileged access controls. - **Incident Response Gaps:** No formal, tested incident response plan and a delayed investigation timeline following the breach. - **Operational Resourcing Issues:** Insufficient internal cyber capability, no dedicated cybersecurity personnel, and a lack of staff training. ### Implications for Financial Services Licensees The FIIG case is a reminder that cybersecurity obligations are not limited to technical operations teams. Under the Corporations Act, AFS licensees must ensure that their risk management systems—including those for cyber—are both adequate and actively maintained. This includes: - Documented governance frameworks that assign cyber risk responsibility to the board and senior management. - Proactive monitoring and detection measures that are fit for purpose. - Adequate resourcing of cyber functions, including staff, systems, and incident response readiness. - Alignment with industry standards such as ISO 27001, NIST, or ASIC’s own guidance. ### ASIC’s Position ASIC has made it clear that enforcement in relation to cyber risk is a priority. The regulator expects licensees to demonstrate not only awareness of cyber risks, but evidence of an ongoing program of work to manage those risks. The FIIG Securities case is one of the most substantial enforcement actions taken in the cyber domain under Australian corporate law, and is likely to set a benchmark for how other AFS licensees will be assessed going forward. ### Key Questions for Licensees to Consider - Is cybersecurity formally integrated into board-level risk reporting? - Are cyber defences subject to regular third-party testing? - Does the organisation have a tested and resourced incident response plan? - Has the business conducted a cyber risk assessment aligned with ASIC’s guidance? [Cyber Security](https://digitalfrontierpartners.com.au/news/tag/cyber-security), [Financial Services](https://digitalfrontierpartners.com.au/news/tag/financial-services) ## Related posts [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/AI-Generated%20Media/Images/A%20darktinged%20digital%20landscape%20fills%20the%20image%2c%20dominated%20by%20a%20futuristic%20city%20skyline%20with%20towering%20structures%20that%20shimmer%20under%20a%20clouded%20sky.jpeg?height=200&name=A%20darktinged%20digital%20landscape%20fills%20the%20image%2c%20dominated%20by%20a%20futuristic%20city%20skyline%20with%20towering%20structures%20that%20shimmer%20under%20a%20clouded%20sky.jpeg)](https://digitalfrontierpartners.com.au/news/evolving-cyber-threats-key-incidents-and-implications-for-security) ## [Evolving Cyber Threats: Key Incidents and Implications for Security](https://digitalfrontierpartners.com.au/news/evolving-cyber-threats-key-incidents-and-implications-for-security) [Read more](https://digitalfrontierpartners.com.au/news/evolving-cyber-threats-key-incidents-and-implications-for-security) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20modern%20office%20environment%20filled%20with%20hightech%20computers%20and%20multiple%20screens%20displaying%20complex%20data%20and%20coding%20interfaces%20At%20the.png?height=200&name=The%20image%20depicts%20a%20modern%20office%20environment%20filled%20with%20hightech%20computers%20and%20multiple%20screens%20displaying%20complex%20data%20and%20coding%20interfaces%20At%20the.png)](https://digitalfrontierpartners.com.au/news/navigating-new-frontiers-in-ai-and-supply-chain-security) ## [Navigating New Frontiers in AI and Supply Chain Security](https://digitalfrontierpartners.com.au/news/navigating-new-frontiers-in-ai-and-supply-chain-security) [Read more](https://digitalfrontierpartners.com.au/news/navigating-new-frontiers-in-ai-and-supply-chain-security) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20features%20a%20digital%20landscape%20filled%20with%20abstract%20representations%20of%20cyber%20threats%20The%20foreground%20displays%20a%20series%20of%20interconnected%20nodes%20symbolizing%20networks%20with%20warning%20signs%20and%20red%20alerts%20scattered%20throughout%20A%20glowing%20shield%20icon%20si-1.jpeg?height=200&name=The%20image%20features%20a%20digital%20landscape%20filled%20with%20abstract%20representations%20of%20cyber%20threats%20The%20foreground%20displays%20a%20series%20of%20interconnected%20nodes%20symbolizing%20networks%20with%20warning%20signs%20and%20red%20alerts%20scattered%20throughout%20A%20glowing%20shield%20icon%20si-1.jpeg)](https://digitalfrontierpartners.com.au/news/cyber-threats-surge-urgent-need-for-robust-security-measures) ## [Cyber Threats Surge: Urgent Need for Robust Security Measures](https://digitalfrontierpartners.com.au/news/cyber-threats-surge-urgent-need-for-robust-security-measures) [Read more](https://digitalfrontierpartners.com.au/news/cyber-threats-surge-urgent-need-for-robust-security-measures) ###### Visit Us On: [linkedin-in icon](https://www.linkedin.com/company/digitalfrontierpartners/posts/?feedView=all) [Follow us on Facebook](https://www.youtube.com/watch?v=-BsUxioXzCk&t=6s) --- [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp)](https://digitalfrontierpartners.com.au/) Level 4, 350 Collins St, Melbourne VIC, Australia 3000 +61 [1800 288 817](https://www.google.com/search?q=digital+frontier+partners&oq=digital+&gs_lcrp=EgZjaHJvbWUqDwgAECMYJxjjAhiABBiKBTIPCAAQIxgnGOMCGIAEGIoFMhUIARAuGCcYrwEYxwEYgAQYigUYjgUyBggCEEUYOTIMCAMQABhDGIAEGIoFMgwIBBAAGEMYgAQYigUyBggFEEUYPDIGCAYQRRg8MgYIBxBFGDzSAQg0MzQ1ajBqN6gCALACAA&sourceid=chrome&ie=UTF-8#) Company   - [Home](https://digitalfrontierpartners.com.au/hp) - [About Us](https://digitalfrontierpartners.com.au/about) - [Careers](https://digitalfrontierpartners.zohorecruit.com.au/jobs/Careers) - [Contact Us](https://digitalfrontierpartners.com.au/contact) --- Resources - [News](https://digitalfrontierpartners.com.au/news) - [Research](https://digitalfrontierpartners.com.au/news) - [Weekly Cyber Report](https://digitalfrontierpartners.com.au/news) - [Case Studies](https://digitalfrontierpartners.com.au/news) --- Policies - [Privacy Policy](https://digitalfrontierpartners.com.au/news/privacy-policy) - [Information Security Policy](https://digitalfrontierpartners.com.au/news/information-security-policy) - [Quality Policy](https://digitalfrontierpartners.com.au/news/quality-policy) Products and Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise Artificial Intelligence (AI)](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) --- Industries - [Local Government](https://digitalfrontierpartners.com.au/localgovernment-cybersecurity) - [Financial Services Cyber Security](https://digitalfrontierpartners.com.au/financialservices) - [Financial Services Artificial Intelligence](https://digitalfrontierpartners.com.au/financial-services-artificial-intelligence) - [Mid Market Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-artificial-intelligence) - [Aged Care Roster Optimisation](https://digitalfrontierpartners.com.au/aged-care-rostering-optimisation) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Digital Frontier Partners", "url" : "https://digitalfrontierpartners.com.au/news/author/digital-frontier-partners" }, "dateModified" : "2025-03-25T00:17:05.533Z", "datePublished" : "2025-03-25T00:17:05.000Z", "headline" : "Cybersecurity in Financial Services: The FIIG Securities Case", "image" : [ "https://digitalfrontierpartners.com.au/hubfs/AI-Generated%20Media/Images/The%20image%20captures%20an%20old%20office%20environment%20within%20a%20financial%20institution%20showcasing%20a%20traditional%20conference%20room%20with%20a%20old%20%20table%20and%20comfortable%20chairs%20room%20of%20board%20members%20men%20%20old%20times%20%20traditional-1.jpeg" ], "mainEntityOfPage" : { "@id" : "https://digitalfrontierpartners.com.au/news/cybersecurity-in-financial-services-the-fiig-securities-case", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://digitalfrontierpartners.com.au/hubfs/DFP-Logo.webp" } } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://digitalfrontierpartners.com.au/#organisation", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "AU", "addressLocality" : "Melbourne", "addressRegion" : "VIC", "postalCode" : "3000", "streetAddress" : "Level 4, 350 Collins Street" }, "description" : "Digital Frontier Partners provides enterprise technology advisory, AI enablement, workforce optimisation and cybersecurity services, helping organisations align strategy, value and risk.", "email" : "contact@digitalfrontierpartners.com", "knowsAbout" : [ "Enterprise AI enablement", "Artificial intelligence strategy", "AI governance and risk", "Workforce optimisation", "Cybersecurity", "Technology due diligence", "Digital transformation" ], "logo" : { "@type" : "ImageObject", "contentUrl" : "https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp", "height" : 342, "width" : 1200 }, "name" : "Digital Frontier Partners", "telephone" : "+61 1800 288 817", "url" : "https://digitalfrontierpartners.com.au/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://digitalfrontierpartners.com.au/#website", "@type" : "WebSite", "inLanguage" : "en-AU", "name" : "Digital Frontier Partners", "publisher" : { "@id" : "https://digitalfrontierpartners.com.au/#organisation" }, "url" : "https://digitalfrontierpartners.com.au/" } ```