The Securities and Exchange Commission (SEC) has proposed changes to standardize public companies’ disclosures regarding cybersecurity risk management, strategy, governance and incident reporting.
https://www.securitymagazine.com/articles/97268-sec-proposes-cybersecurity-risk-management-incident-disclosure-rules-for-enterprises
