News & Analysis as of

Final Rules Cyber Incident Reporting Risk Management

Keating Muething & Klekamp PLL

Pay vs. Performance and Cybersecurity Disclosure Rules: Will the SEC Retract Rulemaking?

On March 31, 2025, members of the U.S. House of Representatives Committee on Financial Services sent a letter to Mark Uyeda, Acting Chairman of the U.S. Securities and Exchange Commission. Seeking to “undo the damage from...more

Blank Rome LLP

Cybersecurity in the Marine Transportation System: What You Need to Know About the Coast Guard's Final Rule

Blank Rome LLP on

The U.S. Coast Guard (“USCG”) published a final rule on January 17, 2025, addressing Cybersecurity in the Marine Transportation System (the “Final Rule”), which seeks to minimize cybersecurity related transportation security...more

Polsinelli

The SEC Raises the Stakes: New Cybersecurity Rules for Publicly Traded Companies Hit the Books in 2023

Polsinelli on

In 2023, the U.S. Securities and Exchange Commission (“SEC”) issued its now-fully implemented Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure Rule. The Rule reflects the reality that cybersecurity...more

Mayer Brown Free Writings + Perspectives

Cybersecurity Disclosure and Compliance & Disclosure Interpretations

Recently, in advance of the effective date (December 18, 2023), the Director of the SEC’s Division of Corporation Finance provided additional guidance regarding the final rules relating to cybersecurity incident disclosure...more

Woods Rogers

Examining Materiality and Cybersecurity Incidents: Practical Tips for Implementing the New SEC Rules

Woods Rogers on

Publicly traded companies have tangled with the question of when a cybersecurity incident should be disclosed to the public and investors. In a bid to add clarity to the topic, the U.S. Securities and Exchange Commission...more

Parker Poe Adams & Bernstein LLP

Next Steps for Companies Ahead of December Deadline for SEC Cybersecurity Disclosures

In less than three months, public companies and certain foreign private companies will have to take additional steps after cybersecurity breaches: deciding whether an incident meets the materiality threshold that requires...more

Ankura

[Webinar] SEC New Cybersecurity Final Rule: A Different Perspective from the Viewpoints of the CISO, General Counsel, & The Board...

Ankura on

Any time a regulation is put forth, there is always a level of uncertainty, especially regarding understanding the roles and responsibilities of key business leaders. The SEC’s new cybersecurity final rule means heightened...more

Kelley Drye & Warren LLP

SEC Issues Final Rules on Cybersecurity Disclosures

On July 26, 2023, in a 3-2 vote, the Securities and Exchange Commission (the “SEC”) adopted new rules (the “Final Rules”) for public companies that will require disclosures regarding cybersecurity incidents, as well as...more

Stikeman Elliott LLP

SEC Adopts New Cybersecurity Disclosure Rules for U.S. Public Companies and Foreign Private Issuers

Stikeman Elliott LLP on

The Securities and Exchange Commission (“SEC”) adopted new rules requiring the disclosure of cybersecurity risk management, strategy, governance and material incidents (the “Rules”), effective September 5, 2023. The Rules...more

Venable LLP

Key Actions for Public Companies under the SEC's New Cybersecurity Rules

Venable LLP on

On July 26, 2023, the Securities Exchange Commission (SEC) adopted a final rule intended to augment and standardize disclosures regarding cybersecurity risk management, governance, and incident reporting. The new rule imposes...more

The Volkov Law Group

Episode 288 -- SEC Adopts Robust New Cybersecurity Disclosure Rules

The Volkov Law Group on

In late July 2023, the Securities and Exchange Commission (“SEC”) adopted new rules requiring public companies to disclose cybersecurity incidents and cybersecurity governance policies and practice.  The SEC largely adopted...more

Holland & Knight LLP

SEC Cybersecurity Rules: Considerations for Incident Response Planning

Holland & Knight LLP on

The new Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure rules (Final Rules) adopted by the U.S. Securities and Exchange Commission (SEC) were published in the Federal Register on Aug. 4, 2023, and...more

Dechert LLP

SEC Final Rule Exempts ABS Issuers from New Cybersecurity Disclosure and Reporting Requirements

Dechert LLP on

ABS issuers have been exempted from the U.S. Securities and Exchange Commission's (“SEC”) final rule requiring certain cybersecurity risk and incident disclosure (the “Final Rule”). The SEC left open the possibility of...more

Husch Blackwell LLP

SEC Heightens Issuers' Cybersecurity Disclosure Requirements

Husch Blackwell LLP on

On July 26, 2023, the U.S. Securities and Exchange Commission (SEC) adopted final rules regarding cybersecurity risk management, strategy, governance, and incident reporting by public companies. The final rules require...more

Woodruff Sawyer

Roadmap for Plaintiffs or Boon for Investors: The SEC’s New Cyber Rules

Woodruff Sawyer on

They’re here. No, not poltergeists. Just the Securities and Exchange Commission’s new cyber disclosure rules. While implementing them will be challenging, and new, serious risks will emerge, the rules are now final and public...more

Wyrick Robbins Yates & Ponton LLP

SEC Adopts Final Cybersecurity Rules

Following up on our previous report from almost a year ago, the U.S. Securities and Exchange Commission (the “SEC” or “Commission”) has adopted final rules intended to enhance and standardize disclosures regarding...more

WilmerHale

Preparing for New Cybersecurity Disclosures

WilmerHale on

Public companies will soon be required to provide increased transparency about cybersecurity incidents, risk management, strategy and governance as a result of new rules adopted by the Securities and Exchange Commission (the...more

Shook, Hardy & Bacon L.L.P.

SEC Issues Rules on Cybersecurity Reporting Obligations

On July 26, the Securities and Exchange Commission (SEC) issued new rules adding cybersecurity disclosures for public companies in three areas: cybersecurity incidents, governance, and risk management and strategy. The new...more

Miller Nash LLP

SEC Adopts Final Cybersecurity Disclosure Rules for Public Companies

Miller Nash LLP on

The Securities and Exchange Commission (SEC) adopted new rules in late July 2023 that will require publicly traded companies to disclose information to assist investors in understanding the processes companies use to manage...more

Kilpatrick

SEC Issues Final Rule on Cybersecurity Incident Reporting and Cybersecurity Risk Management Disclosure

Kilpatrick on

The Securities and Exchange Commission (the “SEC”) issued a final rule on July 26, 2023 that will require public companies to disclose material cybersecurity incidents on Form 8-K within four business days of discovery. In...more

Perkins Coie

It’s Official: Cybersecurity Disclosure Is Coming This Year

Perkins Coie on

The U.S. Securities and Exchange Commission (SEC) adopted final rules on July 26, 2023, requiring public companies to provide current disclosure, within what may be a short time window, about material cybersecurity incidents...more

Ballard Spahr LLP

SEC Adopts New Cybersecurity Reporting Rules, Setting Up Various Compliance Challenges

Ballard Spahr LLP on

After an extensive comment period, the SEC announced on July 26 that it was formally adopting new rules for public companies governing cybersecurity disclosures. The rules had generated significant backlash from public...more

Vedder Price

Cybersecurity Sheriffs Continue to Multiply and Crack Down – New SEC Rule Amps Up Public Company Pressure

Vedder Price on

Last week, a sharply divided U.S. Securities and Exchange Commission (“SEC”) significantly increased reporting requirements on public companies by adopting a Cybersecurity Risk Management, Strategy, Governance, and Incident...more

Cooley LLP

SEC Adopts Comprehensive Cybersecurity Disclosure Requirements

Cooley LLP on

On July 26, 2023, the Securities and Exchange Commission (SEC) voted at an open meeting to adopt final rules to mandate standardized cybersecurity disclosures by public companies. The final rules will...more

White & Case LLP

SEC Adopts Mandatory Cybersecurity Disclosure Rules

White & Case LLP on

On July 26, 2023, the Securities and Exchange Commission ("SEC"), in a 3-2 vote, adopted rules that will require public companies to make prescribed cybersecurity disclosures.1 The rules are designed to elicit "consistent,...more

44 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide