The U.S. Securities and Exchange Commission proposed a new rule and amendments to recordkeeping rules to address cybersecurity risks. The proposal includes requiring regulated companies to immediately notify the commission of a "significant cybersecurity incident," public disclosures to improve transparency and records-retention requirements. The SEC is currently accepting comments on the proposed changes.