Securities
Jan. 28, 2025
SEC cybersecurity incident disclosure rules
Observations and lessons at the one-year anniversary of the rules' implementation.
Adé Heyliger
Partner, Weil, Gotshal & Manges LLP
Public Company Advisory Group and a member of the Sustainability and ESG Advisory Group
On July 26, 2023, the SEC adopted new rules governing public company disclosures related to cybersecurity risk management, strategy, governance, and reporting. The new rules imposed a number of requirements on public companies to disclose the occurrence of a material cybersecurity incident starting on Dec. 18, 2023 (the compliance date). Within four business days after determining a cybersecurity incident is material, public companies must dis...
For only $95 a month (the price of 2 article purchases)
Receive unlimited article access and full access to our archives,
Daily Appellate Report, award winning columns, and our
Verdicts and Settlements.
Or
$795 for an entire year!
Or access this article for $45
(Purchase provides 7-day access to this article. Printing, posting or downloading is not allowed.)
Already a subscriber?
Sign In