SEC issues request for comment on new cyber rules for publicly traded companies

The Securities and Exchange Commission has formally proposed a rule setting new cybersecurity requirements for publicly traded companies, posing a series of questions for stakeholders and setting a May 9 deadline for public comments.

The proposal to require publicly traded companies to disclose cyber incidents and report on the roles of management and the board of directors on cybersecurity policy was published today in the Federal Register.

The SEC on March 8 voted to issue the proposal. Some...