SEC Director Of Enforcement Talks Cyber Resilience

In remarks delivered in 2022 before the Northwestern Pritzker School of Law's Annual Securities Regulation Institute, SEC Chair Gary Gensler reminded us that "cybersecurity is a team sport," and that the private sector is often on the front lines. (See this PubCo post.) He might have said the same thing about cyber resilience—the topic of a Financial Times summit held last month and the subject of remarks delivered to that audience by Gurbir Grewal, the current SEC Director of Enforcement. What is cyber resilience? As defined by Grewal, it's a concept that assumes that "breaches and cyber incidents are likely going to happen, and that firms must be prepared to respond appropriately when they do. In other words, it's not a matter of if, but when."