Companies should not minimize the extent of a material cybersecurity incident by omitting material facts regarding the scope and potential impact of the incident. Cybersecurity risk factor disclosures should be tailored to a...more
The staffs of the Division of Trading and Markets (Division) of the U.S. Securities and Exchange Commission (SEC) and the Financial Industry Regulatory Authority (FINRA) (collectively, the “Regulators”) published a joint...more