Last Wednesday, February 21st, The U.S. Securities and Exchange Commission (SEC) unanimously approved a new guidance calling on public companies to be more forthcoming when disclosing cybersecurity risks, even before a breach or attack happens. The statement, which expands on previous guidance issued in 2011, also warns that corporate insiders must not trade shares when they have information about cybersecurity issues that isn’t public yet. The guidance provides the Commission’s views about public companies’ disclosure obligations under existing law with respect to matters involving cybersecurity risk and incidents. It also addresses the importance of cybersecurity policies and procedures and the application of disclosure controls and procedures, insider trading prohibitions, and Regulation FD and selective disclosure prohibitions in the cybersecurity context. Learn more about this guidelines here!
Digital Edge is an expert in ISO standards, and is certified by International Standard Organization on Information Security and Quality (ISO 27001). The Digital Edge Security and Compliance Team can assist your business to implement policies, standards and practices that not only meet the SEC guidance but exceed these recommendations by providing clients with cybersecurity policies and procedures based on International Standards Organization framework.
Contact us today to further explore how our team can provide your business with an unparalleled cybersecurity solution, with our continued focus on Stability, Security, Efficiency and Compliance.