In a world where cybersecurity has become crucial, new regulations imposed by the Securities and Exchange Commission (SEC) mean that publicly owned companies will soon need to disclose cyberattack incidents swiftly and comprehensively. Under these regulations, companies falling under the SEC’s authority will be obligated to report data breaches in a reduced timeframe, and to provide more detailed information about the extent of any incidents.
The set of regulatory deadlines takes effect next week, requiring companies to act quickly in case of any cyberattacks on their networks. The rules have been put in place not only to ensure quick action against these attacks but also to prevent any future incidents.
In addition to reporting data breaches, companies will be obliged to include in-depth descriptions of their cybersecurity governance in their annual disclosures, beginning from December 15. Adding to this, the new SEC regulations, which are effective from December 18, mandate that the companies disclose their processes put in place to prevent cyberattacks from recurring.
The aim of these new regulatory deadlines is twofold, to make companies more transparent about their data breaches and cybersecurity measures, and to keep investors informed about the cyber risks inherent in the companies in which they invest. The goal is to make sure companies are not only being proactive about their cybersecurity but are also taking the necessary measures to prevent such attacks in the future.
It’s an important shift in how business is done, as it puts more power in the hands of stakeholders and takes a step towards ensuring that the digital world is as secure as it can be. If companies can understand and successfully navigate these new regulations, they’ll be in a much better position to safeguard against cyber-attacks, instilling confidence in their stakeholders and aligning themselves with the SEC’s vision of a safer business environment.
Find more detailed information at this article on Bloomberg Law.