Scott Lesmes spoke to CFO Dive about the U.S. Securities and Exchange Commission’s (SEC) new rules that require companies to disclose how they manage cybersecurity risks.
Scott said that CFOs should expect the SEC to be especially vigilant in the coming months, stating, “Enforcement in this area is becoming more and more frequent.”
Scott also mentioned that “CFOs should put in place a detailed process for: identifying cyberattacks early; focusing on the highest-risk incidents; rallying in-house attorneys; and informing the CEO and board about the most threatening strikes.”
Read the full article (subscription may be required).