SEC’s New Cybersecurity Rules: Is Your Company Ready for the Disclosure Dance?

The SEC clarifies that public companies must disclose “material” cybersecurity incidents under Item 1.05 of Form 8-K. For non-material incidents or those pending materiality determination, use Item 8.01. This aims to reduce investor confusion and ensure significant breaches are properly reported.