Posts tagged Cyber risk.
On February 21, 2018, the SEC published interpretive guidance to assist public companies in preparing disclosures about cybersecurity risks and incidents. Below is a summary outlining this new disclosure category which impacts all public companies, regardless of their size, and applies to all prospectuses and periodic reports filed with the SEC.
If your company’s databases “may be” subject to unauthorized access, the SEC is likely to remind you of your disclosure obligations relating to cybersecurity risks and cyber breaches, including their costs and associated consequences.