CFOs are bracing for new SEC cybersecurity rules set to kick in this month as the regulator is already signaling an aggressive enforcement posture.
The new rules, which build on prior guidance, went into effect in September, but compliance deadlines haven’t yet kicked in.
Beginning on Monday, Dec. 18, the SEC will require all covered entities other than smaller reporting businesses to comply with the new breach disclosure mandates. The SEC will require smaller reporting companies to comply by Wednesday, June 5, 2024.
Since the SEC finalized the rules this summer, public companies have been scrambling to make sure they have the appropriate policies and procedures in place for compliance.
But as companies prepare for the new rules, they’re already seeing ramped-up cybersecurity enforcement from the SEC and other federal agencies. Read more.