On July 26, 2023, 5,996 public companies in the US got a new headache. CEOs, CFOs, CISOs, CIOs, and the senior leadership teams at US public companies must now make room for the SEC’s final rule S7-09-22, Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure.
This guide explains:
- The concept of materiality and how to determine it
- How to address the four-day disclosure rule
- How to report incidents on 8K
- How to prepare for the new 10K
- Ways to communicate risk to CFOs/CEOs