At an open meeting this morning, the Securities and Exchange Commission voted (with dissenters—see, for example, Commissioner Peirce's statements) to adopt amendments aimed at enhancing and standardizing disclosures related to cybersecurity risks and incidents. The amendments were first proposed in March 2022 and generated significant comment both as a result of the prescriptive nature of the proposed disclosure requirements, as well as because the proposed amendments addressed a number of board level governance and cyber oversight matters. While the amendments reflect a number of the concerns raised by commenters, the rules remain fairly prescriptive. A registrant will be required to file a Form 8-K using new Item 1.05 in order to report a material cybersecurity incident and describe the material aspects of the incident. Regulation S-K is being amended to require that registrants describe their processes, if any, for assessing, identifying, and managing material risks from cybersecurity threats, among other things. These significant changes come with a very short effective date.
A detailed client alert will follow.
Please see the SEC's press release, SEC's fact sheet, and the text of the adopting release.
Visit us at mayerbrown.com
Mayer Brown is a global services provider comprising associated legal practices that are separate entities, including Mayer Brown LLP (Illinois, USA), Mayer Brown International LLP (England & Wales), Mayer Brown (a Hong Kong partnership) and Tauil & Chequer Advogados (a Brazilian law partnership) and non-legal service providers, which provide consultancy services (collectively, the "Mayer Brown Practices"). The Mayer Brown Practices are established in various jurisdictions and may be a legal person or a partnership. PK Wong & Nair LLC ("PKWN") is the constituent Singapore law practice of our licensed joint law venture in Singapore, Mayer Brown PK Wong & Nair Pte. Ltd. Details of the individual Mayer Brown Practices and PKWN can be found in the Legal Notices section of our website. "Mayer Brown" and the Mayer Brown logo are the trademarks of Mayer Brown.
© Copyright 2023. The Mayer Brown Practices. All rights reserved.
This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.