The SEC has been increasingly active in targeting cybersecurity practices, issuing new rules governing disclosures of cybersecurity measures and risks, management and board oversight of such risks, and reporting of significant cybersecurity incidents.
This program will provide an overview of the new rule governing public companies, with a specific focus on the requirement report material cybersecurity incidents within four business days, and a recent enforcement action putting Chief Information Security Officers directly in the SEC’s enforcement cross-hairs. Attendees will leave with a practical understanding of what’s required to comply with the new rule and key takeaways for companies to consider for compliance.