Three federal banking regulators issued a rule Thursday that requires banks and other financial institutions to notify their regulator within 36 hours of a “computer-security incident” that materially affects their operation, ability to deliver services, or the stability of the financial sector.

Aaron Nicodemus is the Editor-in-Chief of Compliance Week. He previously worked as a reporter for Bloomberg Law and as business editor at the Telegram & Gazette in Worcester, Mass. Email: aaron.nicodemus@complianceweek.com LinkedIn:...