A new guidance document from the Securities and Exchange Commission may cause some companies to rethink their approach when disclosing cybersecurity risks.<\/p>\n
The SEC\u2019s Division of Corporate Finance issued the guidance document, which is not a new regulation, to offer guidance on how existing disclosure obligations apply to cybersecurity risks. Since many companies are relying heavily on digital technology to conduct business, the guidance document could prove to play a key role in the future of disclosures.<\/p>\n
Too many details online could create a roadmap for those who wish to do harm, but not enough disclosure and a company may not be in compliance with other required disclosures. There are no SEC disclosure requirements that specifically refer to cybersecurity.<\/p>\n
The guidance document suggests disclosing risks of cyber incidents if they are among the factors that make investing in the company risky. If a company has a history of cybersecurity breaches and it is likely (more…)<\/span><\/a><\/p>\n","protected":false},"excerpt":{"rendered":" A new guidance document from the Securities and Exchange Commission may cause some companies to rethink their approach when disclosing cybersecurity risks. The SEC\u2019s Division of Corporate Finance issued the guidance document, which is not a new regulation, to offer…<\/span><\/p>\n