SEC Rule Sparks Reimagining of Cybersecurity Operations

The U.S. Securities and Exchange Commission (SEC) has placed cybersecurity at the center of public company governance with its new cybersecurity incident reporting rule. Companies must disclose not only information on their cybersecurity risk management processes in their annual reports but also any cybersecurity incident, or series of incidents, that are “material” to the company and must do so within four days of determining that the incident was material. Regulators around the globe are requiring that companies report more …

center companies cybersecurity cybersecurity incident cybersecurity risk cybersecurity risk management exchange governance incident incident reporting incidents information management material operations processes public reporting reports risk risk management sec securities securities and exchange commission series u.s. securities and exchange commission