The SEC cybersecurity disclosure proposed rules reiterate the importance of cyber hygiene and incident reporting. The proposed rules would increase the prominence of required disclosure of cyber security incidents in a number of corporate filings, including annual filings and on Forms 8-K and 6-K. For registered companies, the proposed disclosure requirements would demand (1) a better understanding of risks and potentially new technology and processes to meet the potential reporting requirements and (2) greater engagement on cyber security preparedness. Organizations should look to enhance their current cybersecurity risk management and reporting processes accordingly.
Cybersecurity: SEC Proposals for Public Company Reporting, Disclosures
Proposed rules to enhance and standardize disclosures around cybersecurity
Dive into our thinking:
Cybersecurity: SEC Proposals for Public Company Reporting, Disclosures
Download PDFGet the latest from KPMG Regulatory Insights
KPMG Regulatory Insights is the thought leader hub for timely insight on risk and regulatory developments.
Explore more
Regulatory Alerts
Quick hitting summaries of specific regulatory developments and their impact.
Washington Report 360
A weekly newsletter covering legislative and regulatory developments affecting financial services firms—in 360 words or less.
Subscribe to Risk and Cyber Insights
The latest news and updates on how organizations can manage risk in today's environment.