256

U.S. rule requires public companies to disclose cybersecurity breaches in 4 days (www.ctvnews.ca)

submitted 1 year ago by L4s@lemmy.world to c/technology@lemmy.world

8 comments fedilink hide all child comments

U.S. rule requires public companies to disclose cybersecurity breaches in 4 days::The Securities and Exchange Commission adopted rules Wednesday to require public companies to disclose within four days all cybersecurity breaches that could affect their bottom lines. Delays will be permitted if immediate disclosure poses serious national security or public safety risks.

you are viewing a single comment's thread
view the rest of the comments

[-] evatronic@lemm.ee 14 points 1 year ago

Technically, the clock doesn't start ticking on the four-day window for reporting until companies have determined a breach is material.

It's not all breaches. In fact, because this is the SEC, it's about financial impact, not privacy or security.

It's a good start, but I worry that a financial impact based approach creates the wrong incentive.

this post was submitted on 27 Jul 2023

256 points (99.2% liked)

Technology

59366 readers

2098 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS