SEC Cyber Security Disclosure

In 2010, the U.S. Securities and Exchange Commission (SEC) issued rules requiring the disclosure of directors’ qualifications and the role played by the board in risk oversight.1 A new bipartisan Senate bill now seeks to take the discussion one step further and require disclosure of the board’s cybersecurity expertise.