On August 17, 2018, the U.S. Securities and Exchange Commission (the “SEC”) adopted amendments to certain disclosure requirements that have become redundant, overlapping, outdated or superseded in light of other SEC...more
Much has already been written about the SEC’s enforcement action involving Yahoo’s failure to adequately disclose a cyberbreach.1 I am writing about something that the SEC’s announcement and order did not address and...more
On February 21, 2018, the Securities and Exchange Commission (the “SEC”) issued interpretative guidance to assist public companies in preparing disclosures about cybersecurity risks and incidents.1 The guidance refreshes...more