Former stock-exchange security leader praises SEC proposal on cyber incident reporting

The former CISO for the New York Stock Exchange parent company says the SEC’s proposed cyber regulation for publicly traded companies is balanced and includes a reasonable timeline and appropriate level of disclosure for reporting cyber incidents to the commission.

“The proposal as written strikes a good balance,” Jerry Perullo said in comments to the SEC. “There will be times where an investigation is moderately jeopardized by reporting requirements, but thanks to materiality thresholds they will be limited to...