Help Me Understand SEC's Incident Disclosure Rule Changes | UpGuard

This report summarizes the SEC's March 9, 2022 proposed rulemaking to require standardized cybersecurity disclosures—adding Item 1.05 to Form 8‑K for material cybersecurity incidents, expanding Form 6‑K, Form 20‑F, and Regulation S‑K requirements, and requiring enhanced risk-management and board-level cyber expertise disclosures—and describes how UpGuard’s suite (data leak detection, third‑party risk management, attack-surface monitoring, vendor tiering, and executive reporting) can help public companies meet the new disclosure and compliance expectations.