How Should CISOs Navigate the SEC Cybersecurity and Disclosure Rules?

September 27, 2024 at 03:21PM Security leaders must navigate the SEC’s cybersecurity and disclosure rules by understanding 8-K and 10-K filings, disclosing material cybersecurity incidents, and providing annual updates on cybersecurity posture. They need to accurately share cybersecurity updates in a timely manner and lean into transparency to ensure compliance. Additionally, leaders should regularly audit … Read more

Microsoft Names Deputy CISOs, Governance Council to Manage Security Push 

September 24, 2024 at 11:54AM Microsoft’s Secure Future Initiative (SFI) is materializing with the establishment of a Cybersecurity Governance Council steered by CISO Igor Tsyganskiy. This council, overseeing a vast cybersecurity engineering effort, appoints Deputy CISOs for specific domains. SFI aims to embed security as a core priority for all Microsoft employees, paired with senior … Read more

Make Changes to be Ready for the New SEC Cybersecurity Disclosure Rule

November 14, 2023 at 11:18AM The Securities and Exchange Commission (SEC) has implemented a new rule requiring companies to file a Form 8-K within four business days of determining that a cybersecurity incident is material. This rule also mandates annual disclosure of material cybersecurity incidents and information on cybersecurity risk management, strategy, and governance. Jill … Read more