The Securities and Exchange Commission (SEC) has updated its regulations requiring public companies to file cybersecurity disclosures, beginning in December 2023.

Cyber incident reporting within four business days of a material incident and cybersecurity process disclosures indicating Officer and Director ownership over these cybersecurity processes will be required.

This EnergyCentral PowerSession covers:

• The two disclosure requirements of the SEC Cybersecurity Regulations
• What is changing from previous SEC cybersecurity reporting requirements
• What kind of information to report on a Form 8-K when a cyber-incident is determined to be material
• What a “good faith” cybersecurity process entails for cybersecurity disclosure reporting in a Form 10-K