Page 116 - Cyber Defense eMagazine March 2024

These Critical SEC Cybersecurity Disclosure

Rules Questions are Finally Being Answered

Clarity on What Your Reporting Should Cover

By Christopher Salone, Consulting Manager & Financial Services Practice Leader at FoxPointe
Solutions

Last Summer, public companies prepared for the finalization of the U.S. Securities and Exchange
Commission (SEC) rules regarding Cybersecurity Risk Management, Strategy, Governance, and Incident
Disclosure by Public Companies. The initial publishing of these rules left many business leaders with
more questions than answers, including how to maintain compliant and effective reporting practices for
material cyber incidents.

Fast forward to 2024, the rules having been in effect for several months, and business leaders are still
faced with some common misconceptions and challenges understanding their compliance expectations.
Thankfully, faced with discourse and confusion, the SEC has released clarifying points to aid leaders in
this new reporting process.

Cyber Defense eMagazine – March 2024 Edition 116
Copyright © 2024, Cyber Defense Magazine. All rights reserved worldwide.