Thank you for posting Olaf Classen. Now here is an interesting question for companies in the U.S, Germany and Great Britain that are domestic and

← Back to Blog

Thank you for posting Olaf Classen. Now here is an interesting question for companies in the U.S, Germany and Great Britain that are domestic and Foreign Issuers on U.S capital markets covered by the SEC, given last weeks announcement by the SEC of its final cyber ruling.

If Ivanti vulnerabilities lead to hacks on those companies, under the SEC Cyber risk management final rule, that will require organizations listed on U.S markets to assess and report material cyber risks and incidents. Will they be required to report both the Ivanti vulnerabilities and the cyber attack (if they are compromised), if either the vulnerability creates a material risk (yes it does, its end point security and proven to facilitate cyber attacks) or a subsequent cyber attack creates a material cyber incident Ted Dziekanowski?

Also read into this the current CITRIX vulnerability issue.

Rachel V. Rose, JD, MBA Stephen Pitt-Walker, JD, FGIA

#cybersecurity #cyberriskmanagement #securitiesandexchangecommission

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7092870583037669377