SEC official clarifies material incident reporting under new cyber rule
By 
Kyle Brasseur2024-05-22T16:35:00
The director of the Securities and Exchange Commission’s (SEC) Division of Corporation Finance issued a statement addressing early inconsistencies observed under the agency’s new cybersecurity incident disclosure rule.
Erik Gerding cautioned companies against using the new 8-K filing item under the rule (Item 1.05) meant for reporting incidents deemed to be material for disclosing matters that might be material or where materiality was already ruled out.
Instead, he advised companies use another item (e.g., Item 8.01) to share such updates in order to avoid the potential for investor confusion.
Related articles
-
News BriefSEC orders R.R. Donnelley to pay $2.1M over cyber-related control violations
A business communications and marketing services company agreed to pay more than $2 million to settle charges levied by the Securities and Exchange Commission over cybersecurity-related control violations.
-
News BriefSEC amends Reg S-P to require data breach notification within 30 days
The Securities and Exchange Commission will require broker-dealers and registered investment advisers to adopt written policies and procedures for handling data breaches of customer data and notify affected customers within 30 days.
-
PremiumSurvey: Public companies fear added cyber risks from SEC disclosures
Large public companies say they are prepared to comply with the disclosure requirements of the SEC’s new cybersecurity incident rule, according to a survey conducted by Compliance Week and DLA Piper, but concerns exist that those reports could enhance the threat of future cyberattacks.
More from Regulatory Policy
-
News BriefSEC’s Crypto Task Force hits the road with nationwide roundtables
The Securities and Exchange Commission is taking its pro-crypto messaging on the road, planning a series of events for its Crypto Task Force that will be held across the U.S. starting on Aug. 4.
-
Basic PageDOJ warns against using proxies for DEI in federally funded programs
The DOJ is warning that simply scrubbing DEI-related words from policy documents or training materials—and replacing them with thinly veiled proxies—will not protect federally funded organizations from legal scrutiny.
-
ArticleU.K. proposes streamlining regime meant to hold fin serve executives to account
When growth slows, governments often cut rules to attract investment, as the U.K. has in its financial services sector, which contributes 8.8% of GDP, but easing the “compliance burden” raises concerns about oversight, governance, and prioritizing profits over safety.