SEC Cybersecurity Risk Governance Requirements - Christopher Hetner - CSP 122

In April, the SEC is expected to finalize new rules on cybersecurity. The rules will require every publicly traded company to file disclosures with descriptions of their security strategy, governance, and risk management. Companies will need to explain to shareholders how they assess cyber risk, describe their security policies, and demonstrate a significant level of board oversight on cybersecurity issues.

The SEC rules are qualitatively different from existing cyber regulatory frameworks, such as HIPAA and PCI DSS, which skew toward …

april companies csp cyber cyber risk cybersecurity cybersecurity risk descriptions disclosures file governance management policies requirements risk risk management rules sec security security policies security strategy strategy