Preparing for the New Era of Cybersecurity Disclosure
summary
Regulators push mandatory disclosure changes including a proposed four-day reporting requirement (even if law enforcement objects) and a new demand to disclose board and management cyber duties and expertise. Companies are publishing structured transparency—example: multi‑year security annual report releases—and analysts combine BitSight telemetry with self‑reported data to pursue cyber risk quantification. Banks show the most consistent disclosure; materiality is judged by investor relevance and financial thresholds (analysts cite ~10% leverage impacts).
AI-written summary · about
chapters (18)
- 0:00Introduction to cybersecurity disclosure
- 1:30Why more cyber risk disclosure now
- 5:43Reactive vs proactive disclosure trends
- 9:12Sunlight as best disinfectant
- 11:46Preparing for new SEC rules
- 13:51Balancing disclosure risks
- 16:45Changes from 2018 SEC rules
- 18:35Defining materiality in disclosures
- 21:43Credit analysis and cyber materiality
- 23:28Future of cyber data in analysis
- 25:18Board education on cybersecurity
- 28:47Lessons from ESG frameworks
- 32:03Standardized cyber risk reporting
- 34:33Quantifying cyber risk for valuation
- 36:43Incident reporting for non-regulated entities
- 38:50GC and CISO collaboration
- 39:54Enterprise-wide cyber risk mindset
- 40:16Buckle up for regulatory changes
related talks
51mSEC Rules on Cybersecurity: Materiality, Preparedness and Board Oversight
58mPanel Discussion - The Risks of Requiring Premature Vulnerability Disclosures
51mNo More Secrets in Cybersecurity: Implementing ‘Radical Transparency’
52mLiving in a Material(ity) World
50mTen Legal Issues: SEC Disclosures
50mCyber Invisibility: Developing a Security Incident Notification Regime
27m4 Panel Session - Bridging Policy and Practice
47mTechniques to Evolve Risk Governance and Comply with SEC Cybersecurity Rule