topic Re: SEC now requires companies to disclose cyberattacks in 4 days in Governance, Risk, Compliance

SEC now requires companies to disclose cyberattacks in 4 days

Caute_cautim — Mon, 09 Oct 2023 10:40:06 GMT

Hi All

I wonder whether organisations will actually comply with this requirement?

https://www.bleepingcomputer.com/news/security/sec-now-requires-companies-to-disclose-cyberattacks-in-4-days/

How will smaller companies comply?

Regards

Caute_Cautim

Re: SEC now requires companies to disclose cyberattacks in 4 days

JKWiniger — Wed, 26 Jul 2023 23:09:05 GMT

Smaller companies will not be effected by this because it only applies to publicly traded companies, I think once a company gets to that point they are no longer small.

What I don't see is any kind of penalty if a company does not disclose in time or at all.

John-

Re: SEC now requires companies to disclose cyberattacks in 4 days

Caute_cautim — Thu, 27 Jul 2023 03:10:08 GMT

@JKWiniger I agree, I have asked the question on social media, but no response as yet. Apparently not implemented before December 2023. So it will be interesting what the reaction will be from organisations as a whole.

Regards

Caute_Cautim

Re: SEC now requires companies to disclose cyberattacks in 4 days

ericgeater — Thu, 27 Jul 2023 13:01:51 GMT

I find it interesting that publicly traded companies get all these requirements, but SMBs struggle to determine their own cyber-centric identity, posture, and value. It wasn't until yesterday that I learned about the FTC's Section 314, which only broadly addresses cybersecurity through the eyes of consumer protection.

No matter, good move on SEC's part.

Re: SEC now requires companies to disclose cyberattacks in 4 days

JKWiniger — Fri, 28 Jul 2023 16:12:52 GMT

@Caute_cautim I wasn't sure if I should make this a new post or just reply... From the same SEC change comes.. Companies Must Have Corporate Cybersecurity Experts!

I think this is a step in the right direction..

https://www.darkreading.com/edge-articles/companies-must-have-corporate-cybersecurity-experts-sec-says

John-

Re: SEC now requires companies to disclose cyberattacks in 4 days

Caute_cautim — Sat, 29 Jul 2023 04:47:22 GMT

@JKWiniger Excellent news then.... yay

Regards

Caute_Cautim