securityskeptic  Apr 3, 2023

SEC Eyes Final Rules on Incident Disclosure, Board Expertise

Some of the comments to the ruling are good but to be effective, the regs have to create incentives to improve practices. Some of these will incent orgs to CYA instead.

#cyberregs #accountability #incidentreporting

https://www.databreachtoday.com/sec-eyes-final-rules-on-incident-disclosure-board-expertise-a-21593

SEC Eyes Final Rules on Incident Disclosure, Board Expertise

Rules coming in April could require publicly traded companies to disclose a breach within four days of deeming it material as well as board member cybersecurity