The SEC Issues New Cybersecurity Reporting Requirements To Protect Investors And Markets

New York, N.Y. (August 3, 2023) - The Securities and Exchange Commission ("SEC") recently adopted new Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure rules ("Final Amendments") for publicly traded companies. From a cybersecurity reporting standpoint, these rules require public companies to: (1) report material cybersecurity incidents within four business days of discovery; and (2) annually disclose their cybersecurity risk management, strategy, and governance processes. The rules go into effect 30 days after being released in the Federal Register which typically occurs within 45 days after a rule is finalized.

What Is the Purpose of the SEC's Reporting Rules?