On February 21, the SEC issued new guidance on public company cybersecurity disclosures, and Chairman Clayton provided an accompanying statement emphasizing the SEC's expectations that public companies: (i) implement comprehensive cybersecurity policies that allow them to make accurate and timely disclosure of material cybersecurity risks and events; and (ii) prohibit insider trading based on selective disclosure of cyber risks or incidents. The guidance follows a 2011 release addressing similar topics. For more information, see the Jones Day Alert
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
