SEC official clarifies material incident reporting under new cyber rule
By 
Kyle Brasseur2024-05-22T16:35:00
The director of the Securities and Exchange Commission’s (SEC) Division of Corporation Finance issued a statement addressing early inconsistencies observed under the agency’s new cybersecurity incident disclosure rule.
Erik Gerding cautioned companies against using the new 8-K filing item under the rule (Item 1.05) meant for reporting incidents deemed to be material for disclosing matters that might be material or where materiality was already ruled out.
Instead, he advised companies use another item (e.g., Item 8.01) to share such updates in order to avoid the potential for investor confusion.
Related articles
-
News BriefSEC orders R.R. Donnelley to pay $2.1M over cyber-related control violations
A business communications and marketing services company agreed to pay more than $2 million to settle charges levied by the Securities and Exchange Commission over cybersecurity-related control violations.
-
News BriefSEC amends Reg S-P to require data breach notification within 30 days
The Securities and Exchange Commission will require broker-dealers and registered investment advisers to adopt written policies and procedures for handling data breaches of customer data and notify affected customers within 30 days.
-
PremiumSurvey: Public companies fear added cyber risks from SEC disclosures
Large public companies say they are prepared to comply with the disclosure requirements of the SEC’s new cybersecurity incident rule, according to a survey conducted by Compliance Week and DLA Piper, but concerns exist that those reports could enhance the threat of future cyberattacks.
More from Regulatory Policy
-
ArticleWhat is AI washing and why companies need to stop exaggerating their AI prowess
The buzz around generative AI has reached fever pitch over the past few years—to such an extent that it’s practically a death knell for any company to say it’s not investing massively in gen AI to transform their business. There’s only one problem: many companies are either being misleading or ...
-
News BriefApple, Google face compliance crossroads as states push digital safeguards
A new law in Texas will go into effect next January that requires Apple and Google to verify the age of their app store users. This marks another piece of legislation from the state level intended to protect children, and the second such law specifically from Texas to limit children’s ...
-
Basic PageConsumer electronic supply chain at risk, FCC says in proposing new rules
Thousands of computers and other consumer electronic devices imported into the U.S. that were certified as safe by foreign laboratories have been identified as having links to the Chinese government or military, Brendan Carr, chair of the Federal Communications Commission, said Thursday in announcing an order to close the security ...