In July 2023, the SEC announced new rules to standardize the timeliness of cybesercurity incident disclosures resulting in a 4 business-day disclosure period for incidents with “material” impact. The rules also require companies to disclose how they are managing cybersecurity risks with details on their detection and incident response (IR) actions. With the average time […]

Read More SEC Changes Disclosure Rules