In a recent episode of “The Justice Insiders Podcast” titled ‘Incidents in the Material World: SEC Adopts New Cybersecurity Rules‘, Gregg N. Sofer, the host welcomed guest Erik Dullea, a partner at Husch Blackwell. The discussion centered around risk management, strategy, governance, and incident disclosure, all in relation to the recent cybersecurity rules adopted by the U.S. Securities and Exchange Commission (SEC).
The new rules, passed by a slim margin of 3-to-2 votes along party lines, present significant challenges to U.S. businesses in terms of compliance. These rules include disclosing material cybersecurity incidents on Form 8-K Item 1.05. The report must provide a comprehensive description detailing the nature, scope, timing, and other relevant information about the cybersecurity incident.
This shift in the legal landscape for U.S. businesses is significant as it emphasizes the rising importance of cybersecurity in today’s digital age. However, it is important to note that these requirements, while critical for transparency and consumer trust, may place considerable compliance burdens on businesses.
For legal professionals working in corporations and law firms, understanding the nuances of these new regulations is essential to properly advising clients, ensuring corporate compliance, and navigating the potentially complex incident disclosure process.