SEC’s Grewal spotlights enforcement focus on cyber disclosures
By 
Adrianne Appel2023-06-29T21:32:00
The No. 1 priority at the Securities and Exchange Commission (SEC) after organizations are impacted by a cybersecurity incident is that investors receive timely and accurate disclosures, according to the agency’s enforcement head.
The SEC understands firms have to make quick decisions when responding to a cyberattack, including around disclosures, said Gurbir Grewal during a speech at a cyber resilience summit on June 22.
“But we cannot lose focus of the fact that those decisions directly impact customers” and might be material to investors, Grewal said. Publicly traded companies, investment advisers, and broker-dealers collect and hold an extensive amount of data about organizations and client accounts, plus personally identifiable information about individuals that’s valuable to bad actors, Grewal said.
THIS IS MEMBERS-ONLY CONTENT
You are not logged in and do not have access to members-only content.
If you are already a registered user or a member, SIGN IN now.
Related articles
-
PremiumPreparing for SEC cybersecurity rules an opportunity for collaboration
Businesses can prepare for the Securities and Exchange Commission’s upcoming cybersecurity disclosure rule by going through it and identifying key gaps in compliance.
-
PremiumRisks, opportunities under SEC’s cyber incident disclosure rule
The clock is ticking for public companies to put in place policies and practices to meet the requirements of the Securities and Exchange Commission’s newly approved cybersecurity incident disclosure rule.
-
News Brief
SEC adopts rule requiring cyber incident disclosures within four days
The Securities and Exchange Commission finalized its controversial rule requiring public companies to disclose the nature, scope, timing, and impact of cybersecurity incidents deemed to be material within four business days.
More from Regulatory Enforcement
-
ArticleTeledyne fined $1.5M for supplying obsolete parts to Navy
Teledyne will pay more than $1.5 million to settle allegations it supplied electronic parts to the Navy that deviated from specifications, a violation of the False Claims Act (FCA). But its cooperation with prosecutors earned it a credit, according to the U.S. Department of Justice (DOJ).
-
ArticleTungston rod importer pays $54.4M to settle DOJ tariff fraud allegations
An industrial products distributor has agreed to pay $54.4 million to settle allegations, first made by a whistleblower, that it evaded tariffs and violated the federal False Claims Act.
-
ArticleTariff evasion enforcement: The new FCPA
Companies that import goods into the United States will face heightened enforcement scrutiny for attempted acts of customs fraud, including tariff evasion, under the Trump administration. Thus, chief compliance officers and in-house counsel face a new kind of pressure to ensure they are mitigating risk in this area.