News & Analysis as of May 5, 2025

Compliance

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

2024 SEC Cybersecurity Rule Updates

BakerHostetler on 1/7/2025

The first year of a new significant regulatory obligation is often more notable for the absence of regulatory enforcement actions as regulators often observe compliance efforts and challenges, offer guidance, and look for...more

SEC Cybersecurity Incident Disclosure Report

Paul Hastings LLP on 12/19/2024

Paul Hastings released its SEC Cyber Incident Disclosure Report today, providing a unique look at how public companies have responded to new incident disclosure requirements. The Securities Exchange Commission (SEC) approved...more

Recent Developments for Directors - November 2024

Latham & Watkins LLP on 11/13/2024

SEC Penalizes Director for Misleading D&O Questionnaire Response - The SEC recently brought an enforcement action against a director for causing violations of the proxy rules by failing to disclose a close personal...more

The SEC is Cracking Down on Misleading Cybersecurity Disclosure

Fenwick & West LLP on 10/31/2024

On October 22, 2024, the SEC charged two current reporting companies, Unisys Corp. and Check Point Software Technologies, and two former public companies, Mimecast Limited and Avaya Holdings Corp., with making materially...more

SEC Issues Updated Guidance on Cybersecurity Incident Disclosure Under Item 1.05 of Form 8-K

Mintz - Privacy & Cybersecurity Viewpoints on 7/12/2024

On June 24, 2024, the SEC issued five new Compliance & Disclosure Interpretations (C&DIs) relating to the materiality assessment and disclosure requirements of material cybersecurity incidents under Item 1.05 of Form 8-K....more

Cyber Update: SEC Issues New Guidance on Cybersecurity Incident Disclosure

Wiley Rein LLP on 6/27/2024

On June 24, 2024, the U.S. Securities and Exchange Commission (SEC) Division of Corporation Finance (Corp Fin) added to its Compliance and Disclosure Interpretations (C&DI) related to disclosure of Material Cybersecurity...more

Corp Fin Issues Additional Guidance Relating to Cybersecurity Incident Disclosure

Wilson Sonsini Goodrich & Rosati on 6/24/2024

As questions and commentary continue to arise with respect to the SEC’s rules on disclosure of material cybersecurity incidents, the SEC staff has sought to provide additional guidance on the application of the final...more

SEC Corporation Finance Director Voluntarily Weighs in on Cybersecurity Incident Disclosures

Holland & Knight LLP on 5/23/2024

The U.S. Securities and Exchange Commission's (SEC) Division of Corporation Finance Director Erik Gerding released a statement on May 21, 2024, addressing Disclosure of Cybersecurity Incidents Determined to be Material and...more

8 Questions To Ask Before Final CISA Breach Reporting Rule

WilmerHale on 5/13/2024

On April 4, the Cybersecurity and Infrastructure Security Agency published a notice of proposed rulemaking setting out mandatory reporting requirements for covered entities that experience cybersecurity incidents or make...more

DOJ, FBI, and SEC Provide Guidance For Delay Requests Relating to Disclosure of Cybersecurity Incidents Under Form 8-K

K&L Gates LLP on 1/4/2024

On 18 December 2023, the new rules of the US Securities and Exchange Commission (SEC) regarding disclosure of material cybersecurity incidents under Item 1.05 of Form 8-K went into effect, requiring companies to report a...more

Addressing the SEC’s New Cybersecurity Risk Management, Strategy, Governance and Incident Disclosure Requirements

BakerHostetler on 10/27/2023

In July 2023, the SEC adopted new cybersecurity rules for the stated purpose of enhancing and standardizing disclosures regarding cybersecurity risk management, strategy, governance and incidents by public companies. The...more

Next Steps for Companies Ahead of December Deadline for SEC Cybersecurity Disclosures

Parker Poe Adams & Bernstein LLP on 9/29/2023

In less than three months, public companies and certain foreign private companies will have to take additional steps after cybersecurity breaches: deciding whether an incident meets the materiality threshold that requires...more

New SEC Cybersecurity Rules Require Mandatory Disclosure

Dorsey & Whitney LLP on 9/8/2023

On July 26, 2023, the Securities and Exchange Commission adopted new rules imposing disclosure requirements regarding cybersecurity risk management, strategy, governance and incidents. The new rules, which became effective...more

Key Actions for Public Companies under the SEC's New Cybersecurity Rules

Venable LLP on 9/5/2023

On July 26, 2023, the Securities Exchange Commission (SEC) adopted a final rule intended to augment and standardize disclosures regarding cybersecurity risk management, governance, and incident reporting. The new rule imposes...more

Episode 288 -- SEC Adopts Robust New Cybersecurity Disclosure Rules

The Volkov Law Group on 9/4/2023

In late July 2023, the Securities and Exchange Commission (“SEC”) adopted new rules requiring public companies to disclose cybersecurity incidents and cybersecurity governance policies and practice. The SEC largely adopted...more

Public Companies Get Prepared: SEC Adopts New Cybersecurity Disclosure Rules

Smith Anderson on 8/24/2023

The SEC adopted new rules for public companies regarding disclosure of information relating to cybersecurity risk management, strategy, governance, and material incidents. Companies will now be required to disclose...more

New SEC Cybersecurity Rules Are Here: What Should Companies Be Doing to Comply?

Arnall Golden Gregory LLP on 8/21/2023

SEC Cybersecurity Rule Fact Sheet What Is the New Rule? In late July 2023, the SEC adopted new rules that will require publicly traded companies to: disclose cybersecurity incidents within four business days of determining...more

Breaking Down the New SEC Cybersecurity Rules

Epiq on 8/16/2023

On July 26, the Securities and Exchange Commission (SEC) adopted new cybersecurity rules. Organizations will need to disclose material cyber incidents pursuant to a prescribed timeline and information regarding risk...more

The SEC has new Cybersecurity Rules. Are you prepared and ready?

Guidepost Solutions LLC on 8/16/2023

On July 26, 2023, the Securities and Exchange Commission (SEC) implemented new cybersecurity rules to require disclosure of material cybersecurity incidents within four business days, with limited exceptions. Additionally,...more

SEC Adopts Cybersecurity Disclosure Rules

Latham & Watkins LLP on 8/7/2023

The SEC, by a 3-2 vote, has adopted new rules requiring companies to provide: ..current disclosure on Form 8-K within four business days of determining that a material cybersecurity incident has occurred; and ...more

SEC adopts new rules to expand public company disclosure relating to cybersecurity by year end

Eversheds Sutherland (US) LLP on 8/2/2023

On July 26, 2023, the US Securities and Exchange Commission (SEC) released final rules requiring disclosure by public companies of material cybersecurity incidents and policies and procedures related to cybersecurity risk...more

SEC Adopts Final Cybersecurity Rules for Public Companies

Mintz - Privacy & Cybersecurity Viewpoints on 8/2/2023

In a narrow 3-2 decision on July 26, the SEC adopted its final rule concerning cybersecurity risk management, strategy, governance, and incident disclosure (the “Final Rule”). Below we highlight some of the principal changes...more

SEC Adopts Final Rules to Enhance Cybersecurity Disclosure

Womble Bond Dickinson on 8/1/2023

On July 26, 2023, the SEC adopted new rules to enhance and standardize disclosures pertaining to cybersecurity risk management, strategy, governance, and material cybersecurity incidents. The SEC's decision to introduce...more

Although Scaled Back, the SEC’s Newly Adopted Cybersecurity Disclosure Rule Will Require Significant Effort by Public Companies to...

Goodwin on 7/31/2023

As a significant step in its ongoing initiatives on the disclosure, management, and oversight of cybersecurity risks and incidents, on July 26, 2023, the US Securities and Exchange Commission (SEC or Commission) adopted rules...more

SEC Cybersecurity Disclosure Final Rule

Keating Muething & Klekamp PLL on 7/28/2023

On July 26, 2023, the Securities and Exchange Commission (“SEC”) adopted final rules, rule amendments and form amendments to expand and standardize disclosures regarding cybersecurity risk management, strategy, governance,...more

26 Results

View per page

Page: of 2

Cybersecurity › Form 8-K › Compliance

"My best business intelligence, in one easy email…"