SEC Adopts Amendments To Enhance Cybersecurity Disclosures

MB
Mayer Brown
Contributor
Mayer Brown is a distinctively global law firm, uniquely positioned to advise the world’s leading companies and financial institutions on their most complex deals and disputes. We have deep experience in high-stakes litigation and complex transactions across industry sectors, including our signature strength, the global financial services industry.
At an open meeting this morning, the Securities and Exchange Commission voted (with dissenters—see, for example, Commissioner Peirce's statements) to adopt amendments aimed at enhancing...
United States Technology
To print this article, all you need is to be registered or login on Mondaq.com.

At an open meeting this morning, the Securities and Exchange Commission voted (with dissenters—see, for example, Commissioner Peirce's statements) to adopt amendments aimed at enhancing and standardizing disclosures related to cybersecurity risks and incidents. The amendments were first proposed in March 2022 and generated significant comment both as a result of the prescriptive nature of the proposed disclosure requirements, as well as because the proposed amendments addressed a number of board level governance and cyber oversight matters. While the amendments reflect a number of the concerns raised by commenters, the rules remain fairly prescriptive. A registrant will be required to file a Form 8-K using new Item 1.05 in order to report a material cybersecurity incident and describe the material aspects of the incident. Regulation S-K is being amended to require that registrants describe their processes, if any, for assessing, identifying, and managing material risks from cybersecurity threats, among other things. These significant changes come with a very short effective date.

A detailed client alert will follow.

Please see the SEC's press release, SEC's fact sheet, and the text of the adopting release.

Visit us at mayerbrown.com

Mayer Brown is a global services provider comprising associated legal practices that are separate entities, including Mayer Brown LLP (Illinois, USA), Mayer Brown International LLP (England & Wales), Mayer Brown (a Hong Kong partnership) and Tauil & Chequer Advogados (a Brazilian law partnership) and non-legal service providers, which provide consultancy services (collectively, the "Mayer Brown Practices"). The Mayer Brown Practices are established in various jurisdictions and may be a legal person or a partnership. PK Wong & Nair LLC ("PKWN") is the constituent Singapore law practice of our licensed joint law venture in Singapore, Mayer Brown PK Wong & Nair Pte. Ltd. Details of the individual Mayer Brown Practices and PKWN can be found in the Legal Notices section of our website. "Mayer Brown" and the Mayer Brown logo are the trademarks of Mayer Brown.

© Copyright 2023. The Mayer Brown Practices. All rights reserved.

This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

SEC Adopts Amendments To Enhance Cybersecurity Disclosures

United States Technology
Contributor
Mayer Brown is a distinctively global law firm, uniquely positioned to advise the world’s leading companies and financial institutions on their most complex deals and disputes. We have deep experience in high-stakes litigation and complex transactions across industry sectors, including our signature strength, the global financial services industry.
See More Popular Content From

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More