SEC orders disclosure of 'potential' security breaches
Even potential data security breaches must be disclosed by U.S. companies in some circumstances, the Securities and Exchange Commission said today.
The move by the SEC is likely to shed more light on how publicly-traded companies are grappling with cybersecurity problems -- especially because the agency's ruling says that disclosure is needed when "the risk of potential incidents" becomes significant enough to impact the bottom line.
In a statement, the SEC indicated it would like to see:
Discussion of aspects of the registrant's business or operations that give rise to material cybersecurity risks and the … Read more