Cybersecurity Rules

Definition:

SEC rules mandating cybersecurity incident and risk management disclosures for public companies. They require companies to make annual disclosures on Form 20-F or Form 10-K to describe the company’s (i) processes to assess, identify and manage cybersecurity risks, (ii) board oversight of such risks, (iii) management’s role and expertise in assessing and managing such risks and (iv) assessment of whether any risks from cybersecurity threats have materially affected, or are reasonably likely to materially affect, the company. In addition, the final rules require companies to disclose certain information about a material cybersecurity incident on Form 6-K.

Return to Glossary