Software Bill of Materials requirements
Software Bill of Materials requirements are arriving in Financial & Capital Markets through multiple regulatory vectors simultaneously. The U.S. Securities and Exchange Commission's cybersecurity disclosure rules, finalized in 2023, create direct pressure on publicly traded financial institutions to document and disclose material software supply chain risks, and the European Banking Authority has signaled SBOM-adjacent expectations through its ICT risk management guidelines under DORA. Compliance teams are not waiting: they are mapping third-party software inventories against vendor contracts now, before examiners start asking.
Watch
- SEC cybersecurity disclosure rules: what counts as a 'material' SBOM gap
- DORA ICT third-party risk provisions taking effect January 2025 for EU-regulated entities
- CISA cross-sector SBOM guidance and whether financial regulators adopt it by reference
- OCC and Federal Reserve exam posture on software supply chain documentation in IT audits
Recent material activity in Financial & Capital Markets
A selection of recent published briefs; this is not a complete archive.
Federal Reserve approves Peoples Bancorp merger with Citizens National Corporation and Citizens Bank of Kentucky
The Federal Reserve Board approved Peoples Bancorp Inc. of Marietta, Ohio, to merge with Citizens National Corporation and indirectly acquire Citizens Bank of Kentucky, Inc., both of Paintsville, Kentucky. The approval a…
Read a full sample brief →NYSE files immediate-effectiveness rule change amending Rule 7.18 governing Disaster Recovery trading sessions
NYSE filed a proposed rule change on September 25, 2026 to amend Rule 7.18, which governs the exchange's Disaster Recovery trading facility and session procedures. The filing took effect immediately upon submission under…
Read a full sample brief →CFTC files $950 million fraud complaint against Cash FX Group and four co-defendants over Ponzi scheme
The CFTC filed a federal complaint on September 25, 2026 against Cash FX Group S.A., its CEO, and three co-defendants for operating a multilevel marketing Ponzi scheme. The complaint alleges fraudulent solicitation of ov…
Read a full sample brief →FDIC releases August 2026 enforcement actions covering nine orders against banks and individuals
The FDIC published its August 2026 enforcement action list on September 25, 2026, comprising nine orders: two consent orders, one amended consent order, one order terminating a consent order, four orders of prohibition, …
Read a full sample brief →NYSE Texas files immediately effective rule change amending Article 6, Rule 13 order-handling provisions
The SEC granted immediate effectiveness to a NYSE Texas proposed rule change on September 25, 2026, amending Article 6, Rule 13. The filing modifies order-handling rules without a standard comment period. This procedura…
Read a full sample brief →NYSE National files immediately effective rule change amending equity trading membership standards under Rule 2.1210
NYSE National's amendment to Rule 2.1210 took effect immediately on September 25, 2026, bypassing the standard comment period under the self-regulatory organization immediate-effectiveness procedure. The SEC received and…
Read a full sample brief →NYSE files immediately effective rule change amending NYSE Rule 1210 governing registered representative qualifications
NYSE filed a proposed amendment to Rule 1210 on September 25, 2026, altering registration and qualification requirements for associated persons. The filing took immediate effect upon submission, bypassing the standard 19…
Read a full sample brief →NYSE American files immediately effective rule change amending equity options margin rule 2.1210
NYSE American LLC filed a proposed rule change on September 25, 2026, amending Rule 2.1210, which governs margin requirements for equity options positions. The filing took effect immediately upon submission under the sel…
Read a full sample brief →NYSE Arca amends options fee schedule to modify Broker QCC Credit and Manual Billable Rebate Program
NYSE Arca has filed a proposed rule change, effective immediately upon filing, to amend its options fee schedule. The amendment modifies both the Broker Qualified Contingent Cross Credit and the Manual Billable Rebate Pr…
Read a full sample brief →NYSE Arca files immediately effective rule change amending equity trading Rule 2.1210
NYSE Arca filed a proposed rule change to amend Rule 2.1210, published in the Federal Register on September 25, 2026. The filing took effect immediately under the self-regulatory organization immediate-effectiveness proc…
Read a full sample brief →