Transforming CISOs into Storytellers

May 21, 2024 at 08:16AM CISOs must form strong relationships with C-suite executives and boards to advocate for cybersecurity efforts and navigate new SEC rules. They now focus on storytelling and business context in addition to technical expertise to engage and communicate effectively with different audiences. Direct access to board members and elevated positions within … Read more

BreachRx Raises $6.5M to Revamp Incident Response Reporting Systems

April 19, 2024 at 01:39PM Venture capital investors are backing BreachRx with a $6.5 million seed-stage financing. The San Francisco company plans to use the funding to expand its technology, which aims to streamline incident response reporting for corporations and shield cybersecurity executives from personal liability during data breaches. The company is also partnering with … Read more

How the SEC’s Rules on Cybersecurity Incident Disclosure Are Exploited

February 5, 2024 at 10:22AM Data security remains a top challenge for businesses, with a rise in vulnerabilities and cyberattacks. The SEC’s new rules for publicly traded companies aim to address this, but threat actors are finding ways to exploit them, as seen in a recent ransomware incident. Public companies must prioritize cybersecurity, have robust … Read more

Biden to Veto Attempt to Overturn SEC Cyber Incident Disclosure Rules

February 4, 2024 at 10:42AM President Biden will veto Republican lawmakers’ attempt to overturn the Securities and Exchange Commission’s recently implemented cyber incident disclosure rules. These rules require public companies to disclose material breaches within four business days. The White House argues that the rules promote transparency and incentivize companies to invest in cybersecurity, benefitting … Read more

What CISOs Should Exclude From SEC Cybersecurity Filings

October 18, 2023 at 05:43PM CISOs face the challenge of deciding what details to report and omit under new SEC rules. The CISO, along with the security operations center, would prepare a memo with incident details to be reviewed by investor relations and legal for a filing to the SEC. CISOs must balance reporting as … Read more