The SEC’s New Cybersecurity Disclosure Rule: What You Need to Know

The document summarizes the SEC’s Cyber Disclosure Rule (effective December 2023), which requires public companies to timely disclose material cybersecurity incidents and to include expanded annual disclosures on risk management, corporate governance, and disclosure controls; it emphasizes the distinct risks in IT versus OT environments, the importance of OT monitoring and data integrity to satisfy 8-K/10-K reporting requirements, and the need for cross-functional coordination and updated policies to reduce regulatory risk and improve investor transparency.