• Login
    • Advanced search
    • Title
    • Channel
    • Module
  • Home
  • Industry
    •  

      • Aerospace, Defense, and Government Services
      • Automotive and Mobility
      • Consumer
      • Manufacturing and Industrials
      • Education
      • Energy and Natural Resources
      • Financial Institutions
    •  

      • Insurance
      • Life Sciences and Health Care
      • Private Capital
      • Real Estate
      • Sports, Media and Entertainment
      • Technology and Telecoms
      • Transportation and Logistics
  • Practice
    • Corporate & Finance

      • Banking and Loan Finance
      • Business Restructuring and Insolvency
      • Capital Markets
      • Corporate Governance and Public Company Representation
      • Digital Assets and Blockchain
      • Infrastructure, Energy, Resources, and Projects
      • Leveraged and Acquisition Finance
      • Mergers and Acquisitions
      • Pensions
      • Private Equity, Venture Capital and Investment Funds
      • Real Estate
      • Real Estate Investment Trusts (REITs)
      • Tax
      • Transfer Pricing
    • Global Regulatory

      • Administrative and Public Law
      • Antitrust and Competition
      • Communications, Internet, and Media
      • Education
      • Energy Regulatory
      • Environment and Natural Resources
      • Financial Services
      • Food Law
      • Gaming Law
      • Government Contracts and Public Procurement
      • Government Relations and Public Affairs
      • Health
      • Immigration
      • International Trade and Investment
      • Medical Device and Technology Regulatory
      • New Nuclear
      • Pharmaceuticals and Biotechnology Regulatory
      • Privacy and Cybersecurity
      • Space and Satellite
      • Strategic Operations, Agreements and Regulation
      • Transportation Regulatory
    • Intellectual Property

      • Copyright
      • Designs
      • Domain Names
      • IP and Technology Transactions
      • IP Enforcement
      • Patents
      • Trade Secrets and Confidential Know-how
      • Trademarks and Brands
      • Unfair Competition
    • Litigation, Arbitration, and Employment

      • Business and Human Rights
      • Construction and Engineering
      • Corporate and Securities Litigation
      • Employment
      • International Arbitration
      • Investigations, White Collar, and Fraud
      • Products Law
      • Risks, Disputes, and Litigation
  • Comparative guides
  • Engage Premium
  • Login
  • Register
Hogan Lovells Engage 5.7.26
      • Title
      • Channel
      • Module
    • Hit ENTER to search in content
    • Advanced search
    • Login
  • Home
  • Industry
    •  

      • Aerospace, Defense, and Government Services
      • Automotive and Mobility
      • Consumer
      • Manufacturing and Industrials
      • Education
      • Energy and Natural Resources
      • Financial Institutions
    •  

      • Insurance
      • Life Sciences and Health Care
      • Private Capital
      • Real Estate
      • Sports, Media and Entertainment
      • Technology and Telecoms
      • Transportation and Logistics
  • Practice
    • Corporate & Finance

      • Banking and Loan Finance
      • Business Restructuring and Insolvency
      • Capital Markets
      • Corporate Governance and Public Company Representation
      • Digital Assets and Blockchain
      • Infrastructure, Energy, Resources, and Projects
      • Leveraged and Acquisition Finance
      • Mergers and Acquisitions
      • Pensions
      • Private Equity, Venture Capital and Investment Funds
      • Real Estate
      • Real Estate Investment Trusts (REITs)
      • Tax
      • Transfer Pricing
    • Global Regulatory

      • Administrative and Public Law
      • Antitrust and Competition
      • Communications, Internet, and Media
      • Education
      • Energy Regulatory
      • Environment and Natural Resources
      • Financial Services
      • Food Law
      • Gaming Law
      • Government Contracts and Public Procurement
      • Government Relations and Public Affairs
      • Health
      • Immigration
      • International Trade and Investment
      • Medical Device and Technology Regulatory
      • New Nuclear
      • Pharmaceuticals and Biotechnology Regulatory
      • Privacy and Cybersecurity
      • Space and Satellite
      • Strategic Operations, Agreements and Regulation
      • Transportation Regulatory
    • Intellectual Property

      • Copyright
      • Designs
      • Domain Names
      • IP and Technology Transactions
      • IP Enforcement
      • Patents
      • Trade Secrets and Confidential Know-how
      • Trademarks and Brands
      • Unfair Competition
    • Litigation, Arbitration, and Employment

      • Business and Human Rights
      • Construction and Engineering
      • Corporate and Securities Litigation
      • Employment
      • International Arbitration
      • Investigations, White Collar, and Fraud
      • Products Law
      • Risks, Disputes, and Litigation
  • Comparative guides
  • Engage Premium
  • Login
  • Register
  1. News
  2. SEC adopts significant new cybersecurity disclosure requirements

SEC adopts significant new cybersecurity disclosure requirements

SEC Update
10 August 2023
    • Share by email
    • Share on
    • Twitter
    • LinkedIn
    • Get link
    • Get QR Code
    • Download
    • Print

On July 26, the SEC adopted amendments to Regulation S-K and Exchange Act forms requiring public companies to disclose on a current basis material cybersecurity incidents and to disclose annually information regarding their cybersecurity risk management, strategy, and governance. 

The amendments will require companies to report a cybersecurity incident on Form 8-K within four business days after the company determines the incident is material. Companies will be required to amend the Form 8-K to provide updated incident disclosure if any information called for in the initial Form 8-K is not determined or available at the time of the initial filing.

The new requirements extend beyond incident reporting to include information intended to enable investors to evaluate companies’ ability to manage and mitigate their cybersecurity risk and exposure. Companies will be required to describe in their Form 10-K reports their processes for assessing, identifying, and managing material risks from cybersecurity threats, including whether and how any risks from cybersecurity threats have materially affected or are reasonably likely to materially affect their business strategy, results of operations, or financial condition. Companies also will be required to describe the board’s role in overseeing cybersecurity risk and management’s role in assessing and managing the company’s material risks from cybersecurity threats.

The amendments will be effective on September 5, 2023. The amended rules apply to all companies filing reports with the SEC, including foreign private issuers as well as domestic registrants (with the exception of asset-backed issuers). Companies other than smaller reporting companies will first be required to provide the new Form 8-K disclosures beginning on December 18, 2023. Smaller reporting companies will have an additional 180 days to begin complying with the Form 8-K requirements. The Form 10-K disclosures will be due beginning with annual reports filed for fiscal years ending after December 15, 2023. 

The SEC’s adopting release (Release No. 33-11216) can be viewed here and the fact sheet here.

Read more:

1041805_download button

 

Authored by Alan Dye (co-editor), Richard Parrino (co-editor), John Beckman, Kevin Greenslade, Ann Kim, Paul Otto, Peter Marta, Allison Holt Ryan, Brendan Oldham, and Spencer Leroux.

Contacts
Alan Dye
Partner
Washington, D.C.
Richard Parrino
Partner
Washington, D.C.
John Beckman
Partner
Washington, D.C.
Kevin Greenslade
Partner
Northern Virginia
Ann Kim
Partner
Los Angeles
Paul Otto
Partner
Washington, D.C.
Peter Marta
Partner
New York
Allison Holt Ryan
Partner
Washington, D.C.
Brendan Oldham
Senior Associate
Washington, D.C.
Spencer Leroux
Associate
Northern Virginia
Steve Abrams
Partner
Philadelphia
Richard Aftanas
Partner
New York
Tifarah Allen
Partner
Washington, D.C.
Jessica Bisignano
Partner
Philadelphia
David Bonser
Partner
Washington, D.C.
Glenn Campbell
Partner
Baltimore
David Crandall
Partner
Denver
John Duke
Office Managing Partner
Philadelphia
Allen Hicks
Partner
Washington, D.C.
Paul Hilton
Senior Counsel
Denver
Eve Howard
Partner
Washington, D.C.
William Intner
Partner
Baltimore
Bob Juelke
Partner
Philadelphia
Paul Manca
Partner
Washington, D.C.
Michael McTiernan
Partner
Washington, D.C.
Stephen Nicolai
Partner
Philadelphia
Brian O'Fahey
Partner
Redwood City
Les Reese
Partner
Washington, D.C.
Richard Schaberg
Partner
Washington, D.C.
Michael Silver
Partner
New York
Andrew Zahn
Partner
Washington, D.C.
Liz Banks
Counsel
Washington, D.C.
Nick Hoover
Counsel
Baltimore
Keywords Disclosure and Reporting Obligations, Cybersecurity Disclosures, Regulation S-K, Exchange Act, Form 8-K, Form 10-K, Release No. 33-11216, Hogan Lovells SEC Update
Languages English
Topics Corporate Governance, Securities and Public Company Advisory
Countries United States
Delete Comment ?

Are you sure want to delete comment ?

Get link
Embed
Share by email
Get QR Code

Scan this QR Code to share this content

  • Contact us
  • Disclaimer
  • Privacy
  • Cookies
  • Legal Notices
  • Terms of Use

 

This website is operated by Hogan Lovells International LLP, whose registered office is at Atlantic House, Holborn Viaduct, London, EC1A 2FG. For further details of Hogan Lovells International LLP and the international legal practice that comprises Hogan Lovells International LLP, Hogan Lovells US LLP and their affiliated businesses ("Hogan Lovells"), please see our Legal Notices page. © 2022 Hogan Lovells.

Attorney advertising. Prior results do not guarantee a similar outcome.

Thomson Reuters HighQ Logo
© 2023 Hogan Lovells | Privacy Policy | Terms of Service