SEC Adopts Cybersecurity Disclosure Rules for Public Companies

On August 1, 2023, Cravath prepared a memo for its clients entitled “SEC Adopts Cybersecurity Disclosure Rules for Public Companies.” The memo examines the U.S. Securities and Exchange Commission’s recently adopted final rules regarding disclosure by public companies, including foreign private issuers, of cybersecurity risk management, strategy, governance and related incidents. The final rules will significantly expand public companies’ reporting obligations with respect to cybersecurity matters. The memo outlines the new reporting requirements, timeline for compliance and next steps for companies to consider as they evaluate their existing cybersecurity policies and procedures.

Please click here to read the memo.