Fast facts sheet
The new Securities and Exchange Commission (SEC) public company cybersecurity disclosures

Starting December 15, 2023, public (and aspiring public) companies have to spill the beans on SEC-mandated cybersecurity deets, like reporting incidents within four business days of determining they’re material.