SEC official clarifies material incident reporting under new cyber rule
By 
Kyle Brasseur2024-05-22T16:35:00
The director of the Securities and Exchange Commission’s (SEC) Division of Corporation Finance issued a statement addressing early inconsistencies observed under the agency’s new cybersecurity incident disclosure rule.
Erik Gerding cautioned companies against using the new 8-K filing item under the rule (Item 1.05) meant for reporting incidents deemed to be material for disclosing matters that might be material or where materiality was already ruled out.
Instead, he advised companies use another item (e.g., Item 8.01) to share such updates in order to avoid the potential for investor confusion.
Related articles
-
News BriefSEC orders R.R. Donnelley to pay $2.1M over cyber-related control violations
A business communications and marketing services company agreed to pay more than $2 million to settle charges levied by the Securities and Exchange Commission over cybersecurity-related control violations.
-
News BriefSEC amends Reg S-P to require data breach notification within 30 days
The Securities and Exchange Commission will require broker-dealers and registered investment advisers to adopt written policies and procedures for handling data breaches of customer data and notify affected customers within 30 days.
-
PremiumSurvey: Public companies fear added cyber risks from SEC disclosures
Large public companies say they are prepared to comply with the disclosure requirements of the SEC’s new cybersecurity incident rule, according to a survey conducted by Compliance Week and DLA Piper, but concerns exist that those reports could enhance the threat of future cyberattacks.
More from Regulatory Policy
-
ArticleNew regulatory regimes for U.K. and EU ESG ratings firms could increase compliance costs
Environmental ratings are becoming big business as companies seek proof of sustainable and socially beneficial conduct. Firms that issue ratings on environmental, social and governance (ESG) performance are set to be regulated in the EU and U.K.
-
ArticleFRC’s plans for more flexible enforcement gains support
Plans to give the U.K.’s audit regulator more options to regulate firms for sloppy work have been largely well received by experts, who believe the current system is “inflexible,” “cumbersome,” and “slow.”
-
News BriefFDIC eases leverage rules for banks, citing lower risk burdens
The U.S. Federal Deposit Insurance Corporation issued a final rule to change the leverage capital requirements for both large and community banks. The agency said the modification will ”reduce disincentives a banking organization may have to engage in lower-risk activities.”