Complying with the SEC’s Final Rule on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies

Publicly traded companies face new disclosure requirements related to cybersecurity indicents, risk management, and governance that take affect in December for most filers. NACD partnered with Sidley Austin to develop this boardroom tool to inform boards of the key points in the U.S. Securities and Exchange Commission’s rule, as well as checklists to help the board oversee the company’s management and disclosure processes, respectively.