The U.S. Securities and Exchange Commission (SEC) Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure rules officially went into effect in December 2023.[1] Aimed at improving ...
On May 21, 2024, Erik Gerding, the Director of the Division of Corporation Finance at the U.S. Securities and Exchange Commission (SEC), released a statement (statement) on the disclosure of ...
The traditional regulatory landscape for cybersecurity disclosure failed to provide consistent and timely information to reasonable investors. The new guidelines imposed by the SEC allow reasonable ...
We collaborate with the world's leading lawyers to deliver news tailored for you. Sign Up for any (or all) of our 25+ Newsletters. Some states have laws and ethical rules regarding solicitation and ...
Question: How should security leaders navigate the SEC's cybersecurity and disclosure rules? What do they need to do in order to ensure compliance? Michael Gray, CTO, Thrive: While the Securities and ...
Major banking groups want the Securities and Exchange Commission to rescind a rule that requires public companies to report cybersecurity incidents to the public within four days. American banking and ...