US SEC cyber rules, SolarWinds CISO charges: How a unified OffSec strategy can enhance your SEC disclosures

The article outlines the SEC's new cybersecurity disclosure rules (effective 15 December 2023), discusses the SEC's unprecedented enforcement action charging SolarWinds and its CISO over the Sunburst supply-chain attack, and explains regulatory and board-level implications for public companies and third-party vendors; it concludes with a product-focused pitch for YesWeHack's vulnerability management, bug bounty, ASM and pentest-management services as tools to help meet the new disclosure and risk-management expectations.