SEC datasheet PDF open on an ipad screen
The U.S. Securities and Exchange Commission (SEC) recently adopted new rules that create obligations for reporting “material” cybersecurity incidents and disclosing cybersecurity risk management, expertise, and governance. But communicating cybersecurity risk to non-cybersecurity investors and boards can be challenging.