Show Your Work: The SEC Cyber Rules and Documenting Materiality Analysis Under NIST FIPS 199

Baker Donelson – The new SEC incident-reporting regulation's centerpiece is its four-day material breach reporting requirement, which means public companies will need to include a materiality assessment as a key element within their incident response plan.