SEC disclosure rule for \u2018material\u2019 cybersecurity incidents goes into effect | CyberScoop<\/title> <meta name=\"description\" content=\"The controversial rule requires publicly traded companies to report such events to the agency within four business days.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/sec-cybersecurity-incidents-disclosure-rule\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"SEC disclosure rule for \u2018material\u2019 cybersecurity incidents goes into effect\"> <meta property=\"og:description\" content=\"The controversial rule requires publicly traded companies to report such events to the agency within four business days.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/sec-cybersecurity-incidents-disclosure-rule\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:published_time\" content=\"2023-12-18T21:27:31+00:00\"> <meta name=\"author\" content=\"mbracken\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1701905043g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress-next\/dist\/css\/related-posts-block-styles.min.css?m=1701205643g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1702656561g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=7dab012cdc88b5676610\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/78591\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.4.2\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=78591\">\n<link rel=\"alternate\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fsec-cybersecurity-incidents-disclosure-rule%2F\">\n<link rel=\"alternate\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fsec-cybersecurity-incidents-disclosure-rule%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-78591 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/sec-cybersecurity-incidents-disclosure-rule\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"24.522388059701\">\n<div class=\"single-article__header-content\" readability=\"29.086956521739\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/news\/cybersecurity\/\"> <span>Cybersecurity<\/span> <\/a> <\/li>\n<\/ul>\n<p> The controversial rule requires publicly traded companies to report such events to the agency within four business days. <\/p>\n<\/p><\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"419\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect.jpg?resize=640%2C419&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg 4783w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg?resize=300,196 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg?resize=768,502 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg?resize=1024,669 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg?resize=1536,1004 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg?resize=2048,1339 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg?resize=600,392 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg?resize=257,168 257w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg?resize=515,337 515w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg?resize=1032,675 1032w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-2.jpg?resize=1289,843 1289w\" sizes=\"(max-width: 1032px) 100vw, 1032px\"><figcaption> The headquarters of the Securities and Exchange Commission is seen in Washington, D.C., on Jan. 28, 2021. (Photo by Saul Loeb \/AFP via Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"80.473952434881\"><body readability=\"162.0090250037\"><\/p>\n<p>Publicly traded companies are now required to disclose \u201cmaterial\u201d cybersecurity incidents to the U.S. Securities and Exchange Commission, after the new agency rule <a href=\"https:\/\/www.sec.gov\/files\/33-11216-fact-sheet.pdf\">went into effect Monday<\/a>.<\/p>\n<p>While the SEC\u2019s rule is aimed at providing investors with information on potential risks to replace the inconsistent disclosures of major incidents, the controversial rulemaking has garnered criticism from industry, Republican lawmakers and some cybersecurity experts.<\/p>\n<p>The implementation of the rule comes at a time when there are few breach reporting requirements, a fact that largely leaves government and policymakers without basic information on the current landscape.<\/p>\n<p>However, critics of the rule have levied myriad complaints, including that the disclosure time is too quick, such information could potentially endanger national security, it is duplicative of existing regulations, and \u2014 following the <a href=\"https:\/\/cyberscoop.com\/sec-sues-solarwinds-and-ciso-for-fraud\/\">SEC\u2019s lawsuit against SolarWinds<\/a> and its former chief information security officer for fraud \u2014 it places more liability pressure on CISOs.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>\u201cThe Commission determined that new rules would provide investors with the more timely, consistent, comparable, and decision-useful information they need to make informed investment and voting decisions,\u201d Erik Gerding, director of the division of corporation finance at the SEC, <a href=\"https:\/\/www.sec.gov\/news\/speech\/gerding-cybersecurity-disclosure-20231214\">said in a statement<\/a>.<\/p>\n<p>Concerns around the ruling also focused on a potential duplicate reporting regulatory regime, as the Cybersecurity and Infrastructure Security Agency is undergoing a rulemaking that would require critical infrastructure owners and operators to report major cyber incidents. Mandated by the Cyber Incident Reporting for Critical Infrastructure Act of 2022, the law requires owners to report significant cyber breaches to CISA within 72 hours.<\/p>\n<p>That duplication was called out in a <a href=\"https:\/\/garbarino.house.gov\/media\/press-releases\/garbarino-tillis-introduce-joint-resolution-disapproval-overreaching-sec-rule\">November joint resolution<\/a> to overturn the SEC ruling from Rep. Andrew Garbarino, R-N.Y., and a companion bill from Sen. Thom Tillis, R-N.C.<\/p>\n<p>\u201cThis cybersecurity disclosure rule is a complete overreach on the part of the SEC and one that is in direct conflict with congressional intent,\u201d Garbarino said in a statement at the time. \u201cCISA, as the lead civilian cybersecurity agency, has been tasked with developing and issuing regulations for cyber incident reporting as it relates to covered entities.\u201d<\/p>\n<p>CISA\u2019s CIRCIA law applies to incidents that have a substantial loss or disruption to critical infrastructure owners and operators, while the SEC rule applies to publicly traded companies. Additionally, there is no public disclosure requirement under CIRCIA for individual incidents. <a href=\"https:\/\/dfrlab.org\/2023\/06\/14\/whos-afraid-of-the-sec\/\">Other experts have noted<\/a> that the SEC ruling complements rather than conflicts with CISA\u2019s ruling.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>\u201cUntil the cost of bad outcomes becomes higher than the cost of investing in cybersecurity, the market will not reward different behavior. Transparency is a critical first step,\u201d Maia Hamin, associate director with the Atlantic Council\u2019s Cyber Statecraft Initiative under the Digital Forensic Research Lab, wrote at the time.<\/p>\n<p>In his remarks, Gerding also aimed to \u201caddress a potential misconception\u201d: that the SEC is not trying to prescribe cybersecurity best practices or defensive strategies.<\/p>\n<p>\u201cPublic companies have the flexibility to decide how to address cybersecurity risks and threats based on their own particular facts and circumstances,\u201d he said. \u201cInvestors have indicated, however, that they need consistent and comparable disclosures in order to evaluate how successfully public companies are doing so.\u201d<\/p>\n<p>The new ruling has two parts: companies have to report to the SEC within four business days if a \u201cmaterial\u201d hack occurs, and they also have to create annual reports disclosing how they manage cybersecurity.<\/p>\n<p>When initially proposed, the rulemaking drew concerns that malicious hackers would use any information out of the disclosures to engage in further attacks. However, Gerding said that filings do not have to disclose technical information or response plans in detail that could harm any remediation efforts.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Another concern raised by some was regarding potential national security risks stemming from disclosures. The final ruling allows for a written notification by the U.S. Attorney General if a public disclosure of an incident is determined to pose \u201ca substantial risk to national security or public safety.\u201d<\/p>\n<p>However, it\u2019s unlikely that this method will be used often. <a href=\"https:\/\/www.justice.gov\/media\/1328226\/dl?inline\">Guidance issued by the Department of Justice<\/a> last week said that in many circumstances, disclosures of incidents \u201cprovides an overall benefit for investors, public safety, and national security.\u201d<\/p>\n<p>The potential considerations for holding off a disclosure form is if an attack has a technique or vulnerability that does not have a patch or an available mitigation, if the breach occurred on a system that holds sensitive government records, or if disclosure could harm remediation for a critical infrastructure organization, the guidance notes.<\/p>\n<p>On the liability front, Patrick Joyce, resident CISO at the cybersecurity firm Proofpoint, said in a statement that \u201cthe CISO role has never been easy, and it looks a lot less appealing when you add liability and criminal responsibility to the high pressure, the \u2018always-on\u2019 hours, and the stress of the escalating cyber threat environment.\u201d<\/p>\n<p>\u201cThe SEC rule, with its new cyber incident disclosure and reporting requirements, will likely intensify those concerns and send CISOs clamoring for Directors & Officers insurance,\u201d Joyce said.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Nick Sanna, founder of the FAIR Institute and president of Safe Security, said in a statement that companies that will file a disclosure should consider \u201cthe defensibility, transparency and documentation of their notifications\u201d to the SEC, advocating for the <a href=\"https:\/\/www.cisecurity.org\/insights\/blog\/fair-a-framework-for-revolutionizing-your-risk-analysis\">FAIR materiality assessment model<\/a> as one way to measure material risk.<\/p>\n<p>For publicly traded critical infrastructure organizations, however, cyberattacks are \u201cvery likely material, and that means the four-day countdown enforced by the SEC could start immediately upon discovery,\u201d Edgard Capdevielle, CEO of industrial cybersecurity firm Nozomi Networks, said in an emailed statement. Any impacts to critical infrastructure such as manufacturing, the power grid, oil refineries or health care systems could result in a major impact to commerce as well as public safety or the environment, he said.<\/p>\n<p>\u201cBased on my experience, these OT systems, which are every bit as vulnerable, are not as well protected thanks to years of inattention,\u201d Capdevielle said. \u201cPublic companies that manage OT and IoT must be prepared to respond quickly if and when those systems are compromised in a cyberattack.\u201d<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"1.6447368421053\">\n<div class=\"author-card\" readability=\"9\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2023\/12\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect-1.jpg?w=640&ssl=1\" alt=\"Christian Vasquez\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Christian Vasquez<\/h4>\n<p> Christian covers industrial cybersecurity for CyberScoop News. He previously wrote for E&E News at POLITICO covering cybersecurity in the energy sector. Reach out: christian.vasquez at cyberscoop dot com <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/sec-cybersecurity-incidents-disclosure-rule\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>SEC disclosure rule for \u2018material\u2019 cybersecurity incidents goes into effect<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[78,1323,1324],"tags":[86,1325,1326],"class_list":["post-2225","post","type-post","status-publish","format-standard","hentry","category-cybersecurity","category-sec-cyber-rule","category-securities-and-exchange-commission-sec","tag-cybersecurity","tag-sec-cyber-rule","tag-securities-and-exchange-commission-sec"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity\/\" rel=\"category tag\">Cybersecurity<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/sec-cyber-rule\/\" rel=\"category tag\">SEC cyber rule<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/securities-and-exchange-commission-sec\/\" rel=\"category tag\">Securities and Exchange Commission (SEC)<\/a>","tag_info":"Securities and Exchange Commission (SEC)","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=2225"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2225\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=2225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=2225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=2225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":2225,"date":"2023-12-18T21:27:31","date_gmt":"2023-12-18T21:27:31","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=78591"},"modified":"2023-12-18T21:27:31","modified_gmt":"2023-12-18T21:27:31","slug":"sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2023\/12\/18\/sec-disclosure-rule-for-material-cybersecurity-incidents-goes-into-effect\/","title":{"rendered":"SEC disclosure rule for \u2018material\u2019 cybersecurity incidents goes into effect"},"content":{"rendered":"