This website uses cookies. By using this website, you agree to our Cookie Policy.
The Securities and Exchange Commission (“SEC”) has admonished companies to report material cybersecurity incidents in their public filings since 2011, but yesterday the SEC announced a new rule actually requiring disclosure of cybersecurity incidents and providing a standardized means and timeline for how and when companies should report such incidents.