SEC Cyber Rules Signal New Enforcement Plans

This December, the U.S. Securities and Exchange Commission will implement rigorous new cybersecurity reporting requirements for publicly listed companies. The rules require publicly listed companies to formally disclose any cyber incident that will have a material impact on the organization’s financial condition or operations, and mandate extensive annual disclosures regarding cybersecurity risk management, strategy and governance.