The SEC has proposed rules (Release No. 33-11038) that would require new cybersecurity disclosures. If adopted the rules would codify and build upon the Commission guidance on cybersecurity risks and incidents.
The proposed amendments include:
- Form 8-K filing regarding material cybersecurity incidents within 4 business days
- Forms 10-K