New SEC cybersecurity disclosure rules: What you need to know to stay in compliance

The SEC requires companies to report both material cybersecurity incidents and cybersecurity risk management processes in a standardized way.