In July of 2023, the SEC adopted rules requiring registrants that are subject to the reporting requirements of the Securities Exchange Act of 1934 to make timely disclosure of material cybersecurity incidents as well as annual disclosure of information regarding their cybersecurity risk management, strategy, and governance. This thought leadership piece explores the new disclosure rules and highlights what management, and those responsible for managing cybersecurity within their organization, need to be aware of when disclosing cybersecurity incidents.
Additional Information: