Feedback Pushes Back Against SEC’s Cybersecurity Disclosures Rules

Responses to the SEC's proposed cybersecurity disclosure regulations have included concerns that they could direct cybercriminals to vulnerable targets, that they could guide criminals in attacking companies more effectively, that the four-day deadline for disclosures is too short for companies to properly do damage control and understand the nature and extent of a “material cybersecurity incident,” and that they would place a burden on small companies and even deter them from going public.