"SEC's New Cybersecurity Disclosure Rules: What CFOs and Companies Need to Know"
The U.S. Securities and Exchange Commission's new rule requiring publicly traded companies to disclose "material" cybersecurity incidents has gone into effect. The rule aims to provide investors with consistent and timely information on potential risks. However, the rule has faced criticism from industry, Republican lawmakers, and cybersecurity experts who argue that the disclosure time is too quick, it could endanger national security, and it duplicates existing regulations. Critics also believe that the rule places more liability pressure on Chief Information Security Officers (CISOs). The rule complements the Cybersecurity and Infrastructure Security Agency's (CISA) rulemaking, which requires critical infrastructure owners and operators to report major cyber incidents.
