The Securities and Exchange Commission (SEC) has proposed changes to its rules to enhance and standardize public companies’ disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting. The proposed changes would amend Form 8-K, requiring public companies to disclose information about a “material cybersecurity incident” within four business days after the company determines it has experienced a cybersecurity incident, including a data breach, ransomware attack, etc.

Read full article on Security Magazine