The SEC's Action On Cyber Disclosures Should Serve As A Wake Up Call

The SEC's recent actions against Unisys, Avaya, Check Point, and Mimecast really drive home how serious regulators are about cybersecurity disclosures these days. If companies try to downplay or gloss over actual cyber breaches, they're not just risking hefty fines—they're also putting their reputation on the line. The SEC is making it clear: don't talk about cybersecurity risks as if they're just hypothetical when you know something has actually happened. Investors deserve to know the real scope and impact of any incidents.

We see this as a wake-up call for companies to strengthen how they handle and disclose cybersecurity issues. It's crucial to have solid processes in place for quickly detecting, assessing, and reporting any cyber events, not to mention proactively establishing an incident response plan. This isn't just an IT issue; it requires collaboration across legal, compliance, and investor relations teams to ensure the information shared is accurate