Dave Lynn authored an article for Corporate Compliance Insights about the release of the U.S. Securities and Exchange Commission's (SEC) much-anticipated cybersecurity reporting guidelines for public companies.
"In July, the SEC adopted long-awaited amendments to its rules to require disclosure about cybersecurity risk management, strategy, governance, and incident reporting by public companies," Dave wrote. "The SEC's rulemaking action capped off over a decade of SEC guidance and enforcement interest relating to the disclosure of cybersecurity risks and incidents."
He added: "These new disclosure rules will require companies to evaluate and adapt their disclosure controls and procedures, management processes, and governance structures around cybersecurity to prepare for the new environment of transparency in this critical area."
Read the full article.