New SEC Rule Requires Companies to Report Cyber Incidents, FBI Offers Guidance on Delaying Disclosure
Starting December 18, 2023, publicly traded companies in the US will be required to disclose material cybersecurity incidents to the Securities and Exchange Commission (SEC). If an organization determines a cyber incident is “material,” the event must be disclosed within four business days. The FBI, working with the Department of Justice, has released guidance for … Read more