Moody’s finds small businesses need to balance benefits from increased incident reporting with rising compliance costs

New incident reporting rules from CISA and the SEC will improve the federal government's ability to provide information about cyber threats, but the increase in costs to reach compliance could impose a financial strain on small businesses, according to Moody’s Investors Service.

“While smaller companies stand to benefit the most [from info-sharing], they're also likely to feel the most financial strain as they have to implement new cyber practices and lack the economies of scale of larger peers,” Moody’s said...