Companies Get New Tips for Reporting Cyber Issues as Hacks Mount

The SEC today issued new advice for how public companies should disclose cyber breaches to investors as a number of high-profile hacks put a spotlight on the issue.

Securities and Exchange Commission Chairman Jay Clayton said it “reinforces and expands” staff guidance from 2011 for disclosing cyber threats and incidents under existing reporting requirements. He said the new guidance also addresses the importance of corporate policies and procedures for issues including insider trading and selective disclosures.

“I believe that providing the commission’s views on these matters will promote clearer and more robust disclosure by companies about cybersecurity risks and incidents, resulting in more complete information being available ...