Olaf Classen here is an interesting question, now the SEC final ruling has been passed.

← Back to Blog

Olaf Classen here is an interesting question, now the SEC final ruling has been passed. As of the December 2023 covered registrants are to report material cyber incidents to the SEC.

If a covered company is effected by the recently disclosed Ivanti flaws, leading to an incident, how do they define material impact and what do they report? How does this reflect on both the covered organisation and Ivanti (in this case)? Especially if the covered organisation has not identified 3rd party suppliers as a material risk?

Thoughts?

Ted Dziekanowski

#cybersecurity #cyberriskmanagement #materialcyberincident #materialcyberrisk

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7099344417886478336