The SEC’s New Cybersecurity Disclosure Rule: What You Need to Know
Summary: The U.S. Securities and Exchange Commission adopted a Cyber Disclosure Rule requiring public companies to disclose material cybersecurity incidents in a timely and comprehensive manner and to make other cyber-related disclosures in annual filings; the rule fully took effect in December 2023. The rule also requires companies to disclose a series of related unauthorized occurrences that are material in the aggregate even if each is immaterial on its own, and to disclose if they will be materially impacted by a cyber incident suffered by a third party.
What's compelling: OT incidents have a high probability of being considered material, and without comprehensive OT monitoring in place before an incident, companies won't have the data needed to complete their 8-K or 10-K filings.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026