On July 26th, 2023, the SEC adopted rules requiring public companies “to disclose material cybersecurity incidents they experience and to disclose on an annual basis material information regarding their cybersecurity risk management, strategy, and governance”.
On Wednesday, March 15, the SEC held an opening meeting and announced three proposed rules touching on cybersecurity and also reopened its proposed Cybersecurity Risk Management Rule for more public commentary