The U.S. Securities and Exchange Commission published updated guidance for public companies on disclosing cybersecurity risks and breaches, Reuters reports. The guidance covers reporting potential vulnerabilities hackers have yet to exploit, while telling organizations their executives must not engage in trading shares if they are aware of a cybersecurity incident, but it has not been disclosed to the public. SEC Democrats supported the guidance but described the contents as a meager step forward in the face of several high-profile data breaches. SEC Chairman Jay Clayton said the guidance will promote “clearer and more robust disclosure” by organizations in the midst of handling cybersecurity issues.
Full Story