SEC cybersecurity rules News

Lax Cyber Security Could Be Federal Law Violation, SEC Warns

Public companies that fail to tighten their cyber security controls could be violating federal law, the U.S. Securities and Exchange Commission (SEC) said on Tuesday. The regulator’s warning came in the form of a report on its investigation to assess …

SEC Updates Guidance on Cyber Disclosure by Companies

The U.S. Securities and Exchange Commission on Wednesday updated guidance to public companies on how and when they should disclose cyber security risks and breaches, including potential weaknesses that have not yet been targeted by hackers. The guidance also said …

Securities Regulator Calls for Better Cyber Risk Disclosure to Investors

Regulators must do more to help mom-and-pop investors better understand the potential risks posed by cyber crime and new technologies used to commit fraud, U.S. Securities and Exchange Commission Chairman Jay Clayton said on Tuesday. Clayton, who was appointed to …

SEC May Use Yahoo Case to Set Data Breach Disclosure Rules

Yahoo’s disclosure that hackers stole user data from at least 500 million accounts in 2014 has highlighted shortcomings in U.S. rules on when cyber attacks must be revealed and their enforcement. Democratic Senator Mark Warner last week asked the U.S. …