Olivia J Greer Catherine Kim

April 02, 2024 | New York Law Journal

In December, the SEC's new cybersecurity rules went into effect, requiring detailed reporting by public companies regarding cybersecurity risk management, strategy, governance and—perhaps most notably—incidents. This article offers a practical guide to navigating the new disclosure requirements and an overview of how some companies have already begun to respond, as well as analysis of the SEC's rule in the context of a broader trend of regulatory reporting requirements

By Olivia J. Greer, Catherine Kim and Jeeyoon Chung

10 minute read