The proposed SEC cyber incident disclosure rule is a positive change. But it won’t make organizations safer.

If organizations want to actually get serious about protecting themselves, they need to have a robust system for handling incidents when they happen.

change cyber cyber incident disclosure handling incident incidents organizations protecting sec serious system