As hacks worsen, SEC turns up the heat on CISOs

A ShmooCon panel examined the growing legal and regulatory pressures on cybersecurity teams, emphasizing the SEC’s new four-day 8-K breach disclosure requirement, heightened scrutiny of CISOs (including the SolarWinds case), and how remote work and documentation practices increase exposure. Speakers advised practitioners to maintain leadership roles, use disciplined communication, and update disclosures as incidents evolve to navigate transparency and enforcement risks.