The SEC on March 9 proposed new rules to enhance and standardize disclosures relating to the risk management, strategy, governance, and incident reporting requirements of cybersecurity applicable to public companies (registrants).
The US Securities and Exchange Commission (SEC) on March 9
proposed new rules to enhance and standardize disclosures relating
to the risk management, strategy, governance, and incident
reporting requirements of cybersecurity applicable to public
companies (registrants).
The proposed rules are intended to address growing concerns
surrounding the disclosure and reporting of cybersecurity incidents
and, in particular, the underreporting of material cybersecurity
incidents; the timing of the reporting that does take place; the
lack of detailed disclosures regarding incidents; and the inclusion
of unrelated information when disclosures are being made. These
issues can make it harder to locate, interpret, and analyze a
registrant's cybersecurity disclosure.
We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.
