Share on LinkedInShare on LinkedIn

ARTICLE · 02 AUGUST 2023

SEC Approves Final Public Company Cybersecurity Rules – 6 Practical Steps To Take Right Away

Frankfurt Kurnit Klein & Selz PC
Frankfurt Kurnit Klein & Selz PC
Contributor
Frankfurt Kurnit Klein & Selz PC

Frankfurt Kurnit Klein & Selz PC

Founded more than 40 years ago as a boutique law firm servicing the entertainment and arts...

View firm profile
Explore more from Frankfurt Kurnit Klein & Selz PC

On July 26, 2023, the Securities Exchange Commission ("SEC") approved, on a 3-2 vote, final Rules entitled Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure (the "Rules").

United StatesTechnology

On July 26, 2023, the Securities Exchange Commission ("SEC") approved, on a 3-2 vote, final Rules entitled Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure (the "Rules"). The Rules require certain cybersecurity incident disclosures on Form 8-K, generally within 4 business days after the determination that a cybersecurity incident is material. The Rules also address periodic disclosure of cybersecurity risk management practices, strategies, and governance. The Rules go into effect in December, 2023, the exact date to be determined as of the day the final Rules are published in the Federal Register.

My perspective on the Rules is somewhat unique. I am a Cravath-trained securities lawyer who also was trained as a cybersecurity lawyer by one of the top defensive cybersecurity groups in the world – the Bank of America Global Information Security group. Ever since the Rules were proposed, I have been thinking about how public companies would

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

www.fkks.com

This post first appeared in Frankfurt Kurnit's Focus on the Data blog (www.focusonthedata.com). It provides general coverage of its subject area. We provide it with the understanding that Frankfurt Kurnit Klein & Selz is not engaged herein in rendering legal advice, and shall not be liable for any damages resulting from any error, inaccuracy, or omission. Our attorneys practice law only in jurisdictions in which they are properly authorized to do so. We do not seek to represent clients in other jurisdictions.

Originally published by the New York Legal Ethics Reporter

www.fkks.com

This alert provides general coverage of its subject area. We provide it with the understanding that Frankfurt Kurnit Klein & Selz is not engaged herein in rendering legal advice, and shall not be liable for any damages resulting from any error, inaccuracy, or omission. Our attorneys practice law only in jurisdictions in which they are properly authorized to do so. We do not seek to represent clients in other jurisdictions.

www.fkks.com

This alert provides general coverage of its subject area. We provide it with the understanding that Frankfurt Kurnit Klein & Selz is not engaged herein in rendering legal advice, and shall not be liable for any damages resulting from any error, inaccuracy, or omission. Our attorneys practice law only in jurisdictions in which they are properly authorized to do so. We do not seek to represent clients in other jurisdictions.

See more popular content from