Preparing for the SEC Cyber Security Disclosure Rules

Is your organization truly ready to meet the new cybersecurity disclosure and reporting requirements from the U.S. Securities and Exchange Commission (SEC)?

Join Morrison Foerster partner Miriam Wugmeister at a complimentary webinar hosted by the American Conference Institute explaining how public companies can prepare for the recently adopted SEC rules governing cybersecurity risk management, strategy, governance, and incident reporting. Beginning on December 18, 2023, the SEC will require companies to disclose their material cybersecurity incidents within four days of awareness of the incident and adopt annual reporting regarding their cybersecurity risk management, strategy, and governance. The new SEC rules will come into effect amid further requirements from other agencies and intensifying enforcement by the Federal Trade Commission.

On the heels of the rules coming into effect, you can attend this complimentary webinar to gain further clarity and actionable takeaways on high stakes issues, including:

• Determining the SEC’s expectations for incident reporting within four days, and specifically for Form 8-K and Form 10-K filings

• Defining a “material” cybersecurity incident as reaching a threshold that reasonable investors consider important to their decision-making

• Updating initial reporting and what is expected in follow-up reports

• Assessing the incident’s effects, remediation efforts, cyber insurance impacts, and estimated costs of a breach