Self-assessment Surveys

IIROC conducted cybersecurity self-assessment surveys of all Dealers in 2016 and 2018. The surveys were based on the National Institute of Standards and Technology (NIST) cybersecurity framework.

After the results were analyzed and risk-scored, IIROC issued a confidential Cybersecurity Report (CSR) to each Dealer:

  • identifying their level of cybersecurity maturity/preparedness and vulnerabilities, and
  • setting out high-level recommendations for priority attention.

Welcome to!

We have a new look! You can find the Canadian Investment Regulatory Organization (CIRO) at with our fresh look and feel.

You can now find new publications published by CIRO since January 1, 2023 on If you are looking for past notices or bulletins published by MFDA or IIROC, you can find those on our legacy websites. Enforcement related content will continue on those websites as well.

You can now find previous Annual Reports and Enforcement Reports on, along with Halts and Resumption, and our ePublications sign up (for all previous MFDA and IIROC subscriber lists).

We will continue moving items off MFDA and IIROC in 2023/2024. Stay tuned for future updates.